Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2017-3736
Vulnerability from cvelistv5
Published
2017-11-02 17:00
Modified
2024-09-16 20:12
Severity ?
EPSS score ?
Summary
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| ▼ | OpenSSL Software Foundation | OpenSSL |
Version: 1.1.0 - 1.1.0f Version: 1.0.2 - 1.0.2l |
|
|
|||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T14:39:39.687Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20171107-0002/"
},
{
"name": "RHSA-2018:2185",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871"
},
{
"name": "RHSA-2018:2186",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"name": "RHSA-2018:2713",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"name": "DSA-4018",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2017/dsa-4018"
},
{
"name": "GLSA-201712-03",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201712-03"
},
{
"name": "RHSA-2018:0998",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
},
{
"name": "RHSA-2018:2575",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.tenable.com/security/tns-2017-15"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "101666",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/101666"
},
{
"name": "RHSA-2018:2568",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"name": "DSA-4017",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2017/dsa-4017"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.tenable.com/security/tns-2017-14"
},
{
"name": "FreeBSD-SA-17:11",
"tags": [
"vendor-advisory",
"x_refsource_FREEBSD",
"x_transferred"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"
},
{
"name": "1039727",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1039727"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us"
},
{
"name": "RHSA-2018:2187",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20180117-0002/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "OpenSSL",
"vendor": "OpenSSL Software Foundation",
"versions": [
{
"status": "affected",
"version": "1.1.0 - 1.1.0f"
},
{
"status": "affected",
"version": "1.0.2 - 1.0.2l"
}
]
}
],
"datePublic": "2017-11-02T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "carry-propagating bug",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-07-23T22:31:33",
"orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"shortName": "openssl"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20171107-0002/"
},
{
"name": "RHSA-2018:2185",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871"
},
{
"name": "RHSA-2018:2186",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"name": "RHSA-2018:2713",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"name": "DSA-4018",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2017/dsa-4018"
},
{
"name": "GLSA-201712-03",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201712-03"
},
{
"name": "RHSA-2018:0998",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
},
{
"name": "RHSA-2018:2575",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.tenable.com/security/tns-2017-15"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "101666",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/101666"
},
{
"name": "RHSA-2018:2568",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"name": "DSA-4017",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2017/dsa-4017"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.tenable.com/security/tns-2017-14"
},
{
"name": "FreeBSD-SA-17:11",
"tags": [
"vendor-advisory",
"x_refsource_FREEBSD"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"
},
{
"name": "1039727",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1039727"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us"
},
{
"name": "RHSA-2018:2187",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20180117-0002/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "openssl-security@openssl.org",
"DATE_PUBLIC": "2017-11-02T00:00:00",
"ID": "CVE-2017-3736",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "OpenSSL",
"version": {
"version_data": [
{
"version_value": "1.1.0 - 1.1.0f"
},
{
"version_value": "1.0.2 - 1.0.2l"
}
]
}
}
]
},
"vendor_name": "OpenSSL Software Foundation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "carry-propagating bug"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://security.netapp.com/advisory/ntap-20171107-0002/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20171107-0002/"
},
{
"name": "RHSA-2018:2185",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
},
{
"name": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871",
"refsource": "MISC",
"url": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871"
},
{
"name": "RHSA-2018:2186",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"name": "RHSA-2018:2713",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"refsource": "CONFIRM",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"name": "DSA-4018",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2017/dsa-4018"
},
{
"name": "GLSA-201712-03",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201712-03"
},
{
"name": "RHSA-2018:0998",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
},
{
"name": "RHSA-2018:2575",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"name": "https://www.tenable.com/security/tns-2017-15",
"refsource": "CONFIRM",
"url": "https://www.tenable.com/security/tns-2017-15"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "101666",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/101666"
},
{
"name": "RHSA-2018:2568",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"name": "https://www.openssl.org/news/secadv/20171102.txt",
"refsource": "CONFIRM",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"name": "DSA-4017",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2017/dsa-4017"
},
{
"name": "https://www.tenable.com/security/tns-2017-14",
"refsource": "CONFIRM",
"url": "https://www.tenable.com/security/tns-2017-14"
},
{
"name": "FreeBSD-SA-17:11",
"refsource": "FREEBSD",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"
},
{
"name": "1039727",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1039727"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us"
},
{
"name": "RHSA-2018:2187",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180117-0002/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20180117-0002/"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"refsource": "MISC",
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"refsource": "MISC",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"assignerShortName": "openssl",
"cveId": "CVE-2017-3736",
"datePublished": "2017-11-02T17:00:00Z",
"dateReserved": "2016-12-16T00:00:00",
"dateUpdated": "2024-09-16T20:12:39.274Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2017-3736\",\"sourceIdentifier\":\"openssl-security@openssl.org\",\"published\":\"2017-11-02T17:29:00.243\",\"lastModified\":\"2024-11-21T03:26:02.140\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.\"},{\"lang\":\"es\",\"value\":\"Existe un error de propagaci\u00f3n de d\u00edgito (carry propagation) en el procedimiento de elevaci\u00f3n al cuadrado de x86_64 Montgomery en OpenSSL en versiones anteriores a la 1.0.2m y 1.1.0 anteriores a la 1.1.0g. Ning\u00fan algoritmo EC se ha visto afectado. El an\u00e1lisis sugiere que los ataques contra RSA y DSA como resultado de este defecto ser\u00edan muy dif\u00edciles de realizar y no se ve probable. Los ataques contra DH se consideran simplemente factibles (aunque muy dif\u00edciles) porque la mayor\u00eda del trabajo necesario para deducir la informaci\u00f3n sobre una clave privada se puede realizar offline. La cantidad de recursos necesarios para este ataque ser\u00eda muy elevada y lo m\u00e1s probable es que solo sea accesible para un n\u00famero limitado de atacantes. Un atacante necesitar\u00eda acceso online a un sistema sin parchear que utilice la clave privada objetivo en una situaci\u00f3n con par\u00e1metros DH persistentes y una clave privada que se comparte entre m\u00faltiples clientes. Esto solo afecta a los procesadores que son compatibles con las extensiones BMI1, BMI2 y ADX como Intel Broadwell (5\u00aa generaci\u00f3n) y posteriores o AMD Ryzen.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:N/A:N\",\"baseScore\":4.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.0.2\",\"versionEndExcluding\":\"1.0.2m\",\"matchCriteriaId\":\"C1069D78-287A-4623-9721-FD9E26135354\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.1.0\",\"versionEndExcluding\":\"1.1.0g\",\"matchCriteriaId\":\"28E0F2BE-8EDA-4C09-B251-C35352A621D0\"}]}]}],\"references\":[{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/101666\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039727\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:0998\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2185\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2186\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2187\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2568\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2575\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2713\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201712-03\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20171107-0002/\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180117-0002/\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2017/dsa-4017\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2017/dsa-4018\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://www.openssl.org/news/secadv/20171102.txt\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://www.tenable.com/security/tns-2017-14\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2017-15\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/101666\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039727\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:0998\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2185\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2186\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2187\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2568\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2575\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2018:2713\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201712-03\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20171107-0002/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180117-0002/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2017/dsa-4017\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2017/dsa-4018\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://www.openssl.org/news/secadv/20171102.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.tenable.com/security/tns-2017-14\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2017-15\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
ncsc-2024-0239
Vulnerability from csaf_ncscnl
Published
2024-06-07 06:26
Modified
2024-06-07 06:26
Summary
Kwetsbaarheden verholpen in Solarwinds Platform
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Solarwinds heeft kwetsbaarheden verholpen in Solarwinds Platform.
Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, een command-injection uit te voeren, of om een Cross-Site-Scripting-aanval uit te voeren. Een dergelijke aanval kan leiden tot uitvoer van willekeurige code in de browser van het slachtoffer.
Voor succesvol misbruik moet de kwaadwillende voorafgaande authenticatie hebben.
Oplossingen
Solarwinds heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Solarwinds Platform 2024.2
In deze updates zijn tevens kwetsbaarheden verholpen in onderliggende third-party software waar het platform gebruik van maakt. Voor deze kwetsbaarheden zijn eerdere beveiligingsadviezen gepubliceerd.
Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-125
Out-of-bounds Read
CWE-190
Integer Overflow or Wraparound
CWE-20
Improper Input Validation
CWE-325
Missing Cryptographic Step
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-385
Covert Timing Channel
CWE-416
Use After Free
CWE-476
NULL Pointer Dereference
CWE-682
Incorrect Calculation
CWE-704
Incorrect Type Conversion or Cast
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-942
Permissive Cross-domain Policy with Untrusted Domains
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Solarwinds heeft kwetsbaarheden verholpen in Solarwinds Platform.",
"title": "Feiten"
},
{
"category": "description",
"text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, een command-injection uit te voeren, of om een Cross-Site-Scripting-aanval uit te voeren. Een dergelijke aanval kan leiden tot uitvoer van willekeurige code in de browser van het slachtoffer.\n\nVoor succesvol misbruik moet de kwaadwillende voorafgaande authenticatie hebben.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Solarwinds heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Solarwinds Platform 2024.2\n\nIn deze updates zijn tevens kwetsbaarheden verholpen in onderliggende third-party software waar het platform gebruik van maakt. Voor deze kwetsbaarheden zijn eerdere beveiligingsadviezen gepubliceerd.\n\nZie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Missing Cryptographic Step",
"title": "CWE-325"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Incorrect Calculation",
"title": "CWE-682"
},
{
"category": "general",
"text": "Incorrect Type Conversion or Cast",
"title": "CWE-704"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "general",
"text": "Permissive Cross-domain Policy with Untrusted Domains",
"title": "CWE-942"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28996"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28999"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-29004"
}
],
"title": "Kwetsbaarheden verholpen in Solarwinds Platform",
"tracking": {
"current_release_date": "2024-06-07T06:26:01.172456Z",
"id": "NCSC-2024-0239",
"initial_release_date": "2024-06-07T06:26:01.172456Z",
"revision_history": [
{
"date": "2024-06-07T06:26:01.172456Z",
"number": "0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "solarwinds_platform_",
"product": {
"name": "solarwinds_platform_",
"product_id": "CSAFPID-1463738",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds_:solarwinds_platform_:2024.1.1_and_previous_versions:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "solarwinds_platform",
"product": {
"name": "solarwinds_platform",
"product_id": "CSAFPID-1463740",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds_:solarwinds_platform:2024.1.1_and_previous_versions_:*:*:*:*:*:*:*"
}
}
}
],
"category": "vendor",
"name": "solarwinds_"
},
{
"branches": [
{
"category": "product_name",
"name": "orion_platform",
"product": {
"name": "orion_platform",
"product_id": "CSAFPID-1463455",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds:orion_platform:2024.1.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "orion_platform",
"product": {
"name": "orion_platform",
"product_id": "CSAFPID-1463456",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds:orion_platform:2024.1.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "solarwinds_platform_",
"product": {
"name": "solarwinds_platform_",
"product_id": "CSAFPID-1463739",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds:solarwinds_platform_:2024.1.1_and_previous_versions_:*:*:*:*:*:*:*"
}
}
}
],
"category": "vendor",
"name": "solarwinds"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"notes": [
{
"category": "other",
"text": "Incorrect Calculation",
"title": "CWE-682"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2017-3736",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2017/CVE-2017-3736.json"
}
],
"title": "CVE-2017-3736"
},
{
"cve": "CVE-2018-0732",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"notes": [
{
"category": "other",
"text": "Missing Cryptographic Step",
"title": "CWE-325"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2018-0732",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2018/CVE-2018-0732.json"
}
],
"title": "CVE-2018-0732"
},
{
"cve": "CVE-2018-0737",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"notes": [
{
"category": "other",
"text": "Covert Timing Channel",
"title": "CWE-385"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2018-0737",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2018/CVE-2018-0737.json"
}
],
"title": "CVE-2018-0737"
},
{
"cve": "CVE-2019-1559",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"notes": [
{
"category": "other",
"text": "Missing Cryptographic Step",
"title": "CWE-325"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2019-1559",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2019/CVE-2019-1559.json"
}
],
"title": "CVE-2019-1559"
},
{
"cve": "CVE-2020-1971",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-1971",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-1971.json"
}
],
"title": "CVE-2020-1971"
},
{
"cve": "CVE-2021-3712",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2021-3712",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-3712.json"
}
],
"title": "CVE-2021-3712"
},
{
"cve": "CVE-2021-4321",
"cwe": {
"id": "CWE-942",
"name": "Permissive Cross-domain Policy with Untrusted Domains"
},
"notes": [
{
"category": "other",
"text": "Permissive Cross-domain Policy with Untrusted Domains",
"title": "CWE-942"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2021-4321",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-4321.json"
}
],
"title": "CVE-2021-4321"
},
{
"cve": "CVE-2021-23840",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2021-23840",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-23840.json"
}
],
"title": "CVE-2021-23840"
},
{
"cve": "CVE-2022-0778",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "other",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2022-0778",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-0778.json"
}
],
"title": "CVE-2022-0778"
},
{
"cve": "CVE-2023-0215",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2023-0215",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0215.json"
}
],
"title": "CVE-2023-0215"
},
{
"cve": "CVE-2023-0286",
"cwe": {
"id": "CWE-704",
"name": "Incorrect Type Conversion or Cast"
},
"notes": [
{
"category": "other",
"text": "Incorrect Type Conversion or Cast",
"title": "CWE-704"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2023-0286",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0286.json"
}
],
"title": "CVE-2023-0286"
},
{
"cve": "CVE-2024-28996",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1463739"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-28996",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28996.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1463739"
]
}
],
"title": "CVE-2024-28996"
},
{
"cve": "CVE-2024-28999",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1463740"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-28999",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28999.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1463740"
]
}
],
"title": "CVE-2024-28999"
},
{
"cve": "CVE-2024-29004",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1463738"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-29004",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29004.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1463738"
]
}
],
"title": "CVE-2024-29004"
}
]
}
NCSC-2024-0239
Vulnerability from csaf_ncscnl
Published
2024-06-07 06:26
Modified
2024-06-07 06:26
Summary
Kwetsbaarheden verholpen in Solarwinds Platform
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Solarwinds heeft kwetsbaarheden verholpen in Solarwinds Platform.
Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, een command-injection uit te voeren, of om een Cross-Site-Scripting-aanval uit te voeren. Een dergelijke aanval kan leiden tot uitvoer van willekeurige code in de browser van het slachtoffer.
Voor succesvol misbruik moet de kwaadwillende voorafgaande authenticatie hebben.
Oplossingen
Solarwinds heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Solarwinds Platform 2024.2
In deze updates zijn tevens kwetsbaarheden verholpen in onderliggende third-party software waar het platform gebruik van maakt. Voor deze kwetsbaarheden zijn eerdere beveiligingsadviezen gepubliceerd.
Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-125
Out-of-bounds Read
CWE-190
Integer Overflow or Wraparound
CWE-20
Improper Input Validation
CWE-325
Missing Cryptographic Step
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-385
Covert Timing Channel
CWE-416
Use After Free
CWE-476
NULL Pointer Dereference
CWE-682
Incorrect Calculation
CWE-704
Incorrect Type Conversion or Cast
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-942
Permissive Cross-domain Policy with Untrusted Domains
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Solarwinds heeft kwetsbaarheden verholpen in Solarwinds Platform.",
"title": "Feiten"
},
{
"category": "description",
"text": "Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service te veroorzaken, een command-injection uit te voeren, of om een Cross-Site-Scripting-aanval uit te voeren. Een dergelijke aanval kan leiden tot uitvoer van willekeurige code in de browser van het slachtoffer.\n\nVoor succesvol misbruik moet de kwaadwillende voorafgaande authenticatie hebben.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Solarwinds heeft updates uitgebracht om de kwetsbaarheden te verhelpen in Solarwinds Platform 2024.2\n\nIn deze updates zijn tevens kwetsbaarheden verholpen in onderliggende third-party software waar het platform gebruik van maakt. Voor deze kwetsbaarheden zijn eerdere beveiligingsadviezen gepubliceerd.\n\nZie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Missing Cryptographic Step",
"title": "CWE-325"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Covert Timing Channel",
"title": "CWE-385"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Incorrect Calculation",
"title": "CWE-682"
},
{
"category": "general",
"text": "Incorrect Type Conversion or Cast",
"title": "CWE-704"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
},
{
"category": "general",
"text": "Permissive Cross-domain Policy with Untrusted Domains",
"title": "CWE-942"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28996"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28999"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-29004"
}
],
"title": "Kwetsbaarheden verholpen in Solarwinds Platform",
"tracking": {
"current_release_date": "2024-06-07T06:26:01.172456Z",
"id": "NCSC-2024-0239",
"initial_release_date": "2024-06-07T06:26:01.172456Z",
"revision_history": [
{
"date": "2024-06-07T06:26:01.172456Z",
"number": "0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "solarwinds_platform_",
"product": {
"name": "solarwinds_platform_",
"product_id": "CSAFPID-1463738",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds_:solarwinds_platform_:2024.1.1_and_previous_versions:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "solarwinds_platform",
"product": {
"name": "solarwinds_platform",
"product_id": "CSAFPID-1463740",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds_:solarwinds_platform:2024.1.1_and_previous_versions_:*:*:*:*:*:*:*"
}
}
}
],
"category": "vendor",
"name": "solarwinds_"
},
{
"branches": [
{
"category": "product_name",
"name": "orion_platform",
"product": {
"name": "orion_platform",
"product_id": "CSAFPID-1463455",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds:orion_platform:2024.1.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "orion_platform",
"product": {
"name": "orion_platform",
"product_id": "CSAFPID-1463456",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds:orion_platform:2024.1.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "solarwinds_platform_",
"product": {
"name": "solarwinds_platform_",
"product_id": "CSAFPID-1463739",
"product_identification_helper": {
"cpe": "cpe:2.3:a:solarwinds:solarwinds_platform_:2024.1.1_and_previous_versions_:*:*:*:*:*:*:*"
}
}
}
],
"category": "vendor",
"name": "solarwinds"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"notes": [
{
"category": "other",
"text": "Incorrect Calculation",
"title": "CWE-682"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2017-3736",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2017/CVE-2017-3736.json"
}
],
"title": "CVE-2017-3736"
},
{
"cve": "CVE-2018-0732",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"notes": [
{
"category": "other",
"text": "Missing Cryptographic Step",
"title": "CWE-325"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2018-0732",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2018/CVE-2018-0732.json"
}
],
"title": "CVE-2018-0732"
},
{
"cve": "CVE-2018-0737",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"notes": [
{
"category": "other",
"text": "Covert Timing Channel",
"title": "CWE-385"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2018-0737",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2018/CVE-2018-0737.json"
}
],
"title": "CVE-2018-0737"
},
{
"cve": "CVE-2019-1559",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"notes": [
{
"category": "other",
"text": "Missing Cryptographic Step",
"title": "CWE-325"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2019-1559",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2019/CVE-2019-1559.json"
}
],
"title": "CVE-2019-1559"
},
{
"cve": "CVE-2020-1971",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2020-1971",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-1971.json"
}
],
"title": "CVE-2020-1971"
},
{
"cve": "CVE-2021-3712",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2021-3712",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-3712.json"
}
],
"title": "CVE-2021-3712"
},
{
"cve": "CVE-2021-4321",
"cwe": {
"id": "CWE-942",
"name": "Permissive Cross-domain Policy with Untrusted Domains"
},
"notes": [
{
"category": "other",
"text": "Permissive Cross-domain Policy with Untrusted Domains",
"title": "CWE-942"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2021-4321",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-4321.json"
}
],
"title": "CVE-2021-4321"
},
{
"cve": "CVE-2021-23840",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2021-23840",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-23840.json"
}
],
"title": "CVE-2021-23840"
},
{
"cve": "CVE-2022-0778",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "other",
"text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"title": "CWE-835"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2022-0778",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-0778.json"
}
],
"title": "CVE-2022-0778"
},
{
"cve": "CVE-2023-0215",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2023-0215",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0215.json"
}
],
"title": "CVE-2023-0215"
},
{
"cve": "CVE-2023-0286",
"cwe": {
"id": "CWE-704",
"name": "Incorrect Type Conversion or Cast"
},
"notes": [
{
"category": "other",
"text": "Incorrect Type Conversion or Cast",
"title": "CWE-704"
},
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"references": [
{
"category": "self",
"summary": "CVE-2023-0286",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0286.json"
}
],
"title": "CVE-2023-0286"
},
{
"cve": "CVE-2024-28996",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"title": "CWE-89"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1463739"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-28996",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28996.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1463739"
]
}
],
"title": "CVE-2024-28996"
},
{
"cve": "CVE-2024-28999",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1463740"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-28999",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28999.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1463740"
]
}
],
"title": "CVE-2024-28999"
},
{
"cve": "CVE-2024-29004",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1463738"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-29004",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29004.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1463738"
]
}
],
"title": "CVE-2024-29004"
}
]
}
rhsa-2018_2186
Vulnerability from csaf_redhat
Published
2018-07-12 16:14
Modified
2024-11-22 11:15
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 6 security update
Notes
Topic
Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available for Red Hat Enterprise Linux 6.
Red Hat Product Security has rated this release as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details
This release adds the new Apache HTTP Server 2.4.29 packages that are part
of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services
Apache HTTP Server 2.4.23, and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes,
enhancements and component upgrades included in this release.
This release upgrades OpenSSL to version 1.0.2.n
Security Fix(es):
* openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() (CVE-2016-2182)
* openssl: Insufficient TLS session ticket HMAC length checks (CVE-2016-6302)
* openssl: certificate message OOB reads (CVE-2016-6306)
* openssl: Carry propagating bug in Montgomery multiplication (CVE-2016-7055)
* openssl: Truncated packet could crash via OOB read (CVE-2017-3731)
* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* openssl: Read/write after SSL object in error state (CVE-2017-3737)
* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6306
and CVE-2016-7055. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6306.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this release as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.29 packages that are part\nof the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services\nApache HTTP Server 2.4.23, and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes,\nenhancements and component upgrades included in this release.\n\nThis release upgrades OpenSSL to version 1.0.2.n\n\nSecurity Fix(es):\n\n* openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() (CVE-2016-2182)\n\n* openssl: Insufficient TLS session ticket HMAC length checks (CVE-2016-6302)\n\n* openssl: certificate message OOB reads (CVE-2016-6306)\n\n* openssl: Carry propagating bug in Montgomery multiplication (CVE-2016-7055)\n\n* openssl: Truncated packet could crash via OOB read (CVE-2017-3731)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* openssl: Read/write after SSL object in error state (CVE-2017-3737)\n\n* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-6306 \nand CVE-2016-7055. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6306.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2186",
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/"
},
{
"category": "external",
"summary": "1367340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367340"
},
{
"category": "external",
"summary": "1369855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369855"
},
{
"category": "external",
"summary": "1377594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377594"
},
{
"category": "external",
"summary": "1393929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393929"
},
{
"category": "external",
"summary": "1416852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416852"
},
{
"category": "external",
"summary": "1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1523504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504"
},
{
"category": "external",
"summary": "1523510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510"
},
{
"category": "external",
"summary": "JBCS-372",
"url": "https://issues.redhat.com/browse/JBCS-372"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2186.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 6 security update",
"tracking": {
"current_release_date": "2024-11-22T11:15:56+00:00",
"generator": {
"date": "2024-11-22T11:15:56+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2186",
"initial_release_date": "2018-07-12T16:14:52+00:00",
"revision_history": [
{
"date": "2018-07-12T16:14:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-12T16:14:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T11:15:56+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt-debuginfo@2.4.1-19.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-19.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-17.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx-debuginfo@0.9.6-17.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb-debuginfo@5.4-36.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.8-1.Final_redhat_2.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.8-1.Final_redhat_2.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.43-1.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.43-1.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.43-1.redhat_1.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-14.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-14.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-14.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-9.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2n-11.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2n-11.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2n-11.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2n-11.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2n-11.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2n-11.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.29.0-8.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.29.0-8.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.29.0-8.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-23.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.1-23.GA.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-17.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-17.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-17.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-17.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-17.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-17.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-17.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-17.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-17.jbcs.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc@1.1.0-1.redhat_2.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"product_id": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo@1.1.0-1.redhat_2.jbcs.el6?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt-debuginfo@2.4.1-19.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-19.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-17.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx-debuginfo@0.9.6-17.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb-debuginfo@5.4-36.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.8-1.Final_redhat_2.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.8-1.Final_redhat_2.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.43-1.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.43-1.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.43-1.redhat_1.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-14.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-14.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-14.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-9.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2n-11.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2n-11.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2n-11.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2n-11.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2n-11.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2n-11.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.29.0-8.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.29.0-8.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.29.0-8.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-23.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.1-23.GA.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-17.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-17.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-17.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-17.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-17.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-17.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-17.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"product_id": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-17.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-17.jbcs.el6?arch=i686"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc@1.1.0-1.redhat_2.jbcs.el6?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"product_id": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo@1.1.0-1.redhat_2.jbcs.el6?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-19.GA.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-17.GA.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-36.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.8-1.Final_redhat_2.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.43-1.redhat_1.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"product_id": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-14.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-9.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"product_id": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2n-11.jbcs.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.29.0-8.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-23.GA.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-17.jbcs.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"product_id": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc@1.1.0-1.redhat_2.jbcs.el6?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"product_id": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon@1.1.0-1.redhat_2.1.jbcs.el6?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.29-17.jbcs.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"product_id": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon@1.1.0-1.redhat_2.1.jbcs.el6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"relates_to_product_reference": "6Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
"product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64",
"relates_to_product_reference": "6Server-JBCS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2182",
"cwe": {
"id": "CWE-391",
"name": "Unchecked Error Condition"
},
"discovery_date": "2016-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1367340"
}
],
"notes": [
{
"category": "description",
"text": "An out of bounds write flaw was discovered in the OpenSSL BN_bn2dec() function. An attacker able to make an application using OpenSSL to process a large BIGNUM could cause the application to crash or, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2182"
},
{
"category": "external",
"summary": "RHBZ#1367340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367340"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2182",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2182"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()"
},
{
"cve": "CVE-2016-4975",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2016-09-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1375968"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache was vulnerable to a HTTP response splitting attack for sites which use mod_userdir. An attacker could use this flaw to inject CRLF characters into the HTTP header and could possibly gain access to secure data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4975"
},
{
"category": "external",
"summary": "RHBZ#1375968",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1375968"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4975",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4975"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4975",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4975"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975",
"url": "https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975"
}
],
"release_date": "2018-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir"
},
{
"cve": "CVE-2016-6302",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-08-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1369855"
}
],
"notes": [
{
"category": "description",
"text": "An integer underflow flaw leading to a buffer over-read was found in the way OpenSSL parsed TLS session tickets. A remote attacker could use this flaw to crash a TLS server using OpenSSL if it used SHA-512 as HMAC for session tickets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Insufficient TLS session ticket HMAC length checks",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6302"
},
{
"category": "external",
"summary": "RHBZ#1369855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6302",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6302"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6302",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6302"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-08-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Insufficient TLS session ticket HMAC length checks"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc.",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-6306",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-09-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1377594"
}
],
"notes": [
{
"category": "description",
"text": "Multiple out of bounds read flaws were found in the way OpenSSL handled certain TLS/SSL protocol handshake messages. A remote attacker could possibly use these flaws to crash a TLS/SSL server or client using OpenSSL.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: certificate message OOB reads",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6306"
},
{
"category": "external",
"summary": "RHBZ#1377594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6306",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6306"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-09-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 1.2,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: certificate message OOB reads"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
}
],
"cve": "CVE-2016-7055",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2016-10-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1393929"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker\u0027s direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Carry propagating bug in Montgomery multiplication",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-7055"
},
{
"category": "external",
"summary": "RHBZ#1393929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-7055",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7055"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-7055",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7055"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20161110.txt",
"url": "https://www.openssl.org/news/secadv/20161110.txt"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2016-10-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Carry propagating bug in Montgomery multiplication"
},
{
"cve": "CVE-2017-3731",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416852"
}
],
"notes": [
{
"category": "description",
"text": "An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Truncated packet could crash via OOB read",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3731"
},
{
"category": "external",
"summary": "RHBZ#1416852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416852"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3731",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3731"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3731",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3731"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Truncated packet could crash via OOB read"
},
{
"cve": "CVE-2017-3732",
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416856"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: BN_mod_exp may produce incorrect results on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "RHBZ#1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3732",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: BN_mod_exp may produce incorrect results on x86_64"
},
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2017-3737",
"cwe": {
"id": "CWE-391",
"name": "Unchecked Error Condition"
},
"discovery_date": "2017-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1523504"
}
],
"notes": [
{
"category": "description",
"text": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Read/write after SSL object in error state",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3737"
},
{
"category": "external",
"summary": "RHBZ#1523504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3737",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3737"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3737",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3737"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171207.txt",
"url": "https://www.openssl.org/news/secadv/20171207.txt"
}
],
"release_date": "2017-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Read/write after SSL object in error state"
},
{
"cve": "CVE-2017-3738",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2017-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1523510"
}
],
"notes": [
{
"category": "description",
"text": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: rsaz_1024_mul_avx2 overflow bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3738"
},
{
"category": "external",
"summary": "RHBZ#1523510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3738",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3738"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3738",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3738"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171207.txt",
"url": "https://www.openssl.org/news/secadv/20171207.txt"
}
],
"release_date": "2017-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el6.noarch",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.src",
"6Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el6.x86_64",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.i686",
"6Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: rsaz_1024_mul_avx2 overflow bug on x86_64"
}
]
}
rhsa-2018_2568
Vulnerability from csaf_redhat
Published
2018-08-27 14:20
Modified
2024-11-15 02:12
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP20.
Security Fix(es):
* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* IBM JDK: DoS in the java.math component (CVE-2018-1517)
* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
* OpenSSL: Double-free in DSA code (CVE-2016-0705)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP20.\n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\n* OpenSSL: Double-free in DSA code (CVE-2016-0705)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2568",
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2568.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2024-11-15T02:12:20+00:00",
"generator": {
"date": "2024-11-15T02:12:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2568",
"initial_release_date": "2018-08-27T14:20:44+00:00",
"revision_history": [
{
"date": "2018-08-27T14:20:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-27T14:20:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T02:12:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client Supplementary (v. 7)",
"product_id": "7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Client-7.5.Z-Client"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)",
"product_id": "7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5.Z-ComputeNode"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 7)",
"product_id": "7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.5.Z-Server"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 7)",
"product_id": "7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5.Z-Workstation"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Adam Langley"
],
"organization": "Google/BoringSSL",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0705",
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310596"
}
],
"notes": [
{
"category": "description",
"text": "A double-free flaw was found in the way OpenSSL parsed certain malformed DSA (Digital Signature Algorithm) private keys. An attacker could create specially crafted DSA private keys that, when processed by an application compiled against OpenSSL, could cause the application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: Double-free in DSA code",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0705"
},
{
"category": "external",
"summary": "RHBZ#1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0705",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0705"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705"
}
],
"release_date": "2016-02-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenSSL: Double-free in DSA code"
},
{
"cve": "CVE-2017-3732",
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416856"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: BN_mod_exp may produce incorrect results on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "RHBZ#1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3732",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: BN_mod_exp may produce incorrect results on x86_64"
},
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2018-1517",
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618871"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: DoS in the java.math component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "RHBZ#1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: DoS in the java.math component"
},
{
"cve": "CVE-2018-1656",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618869"
}
],
"notes": [
{
"category": "description",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: path traversal flaw in the Diagnostic Tooling Framework",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "RHBZ#1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: path traversal flaw in the Diagnostic Tooling Framework"
},
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-12539",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618767"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: privilege escalation via insufficiently restricted access to Attach API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "RHBZ#1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12539",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539"
}
],
"release_date": "2018-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-27T14:20:44+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Client-7.5.Z-Client:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7ComputeNode-7.5.Z-ComputeNode:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Server-7.5.Z-Server:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el7.x86_64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.ppc64le",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.s390x",
"7Workstation-7.5.Z-Workstation:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: privilege escalation via insufficiently restricted access to Attach API"
}
]
}
rhsa-2018_2185
Vulnerability from csaf_redhat
Published
2018-07-12 16:14
Modified
2024-11-22 11:16
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 7 security update
Notes
Topic
Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this release as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details
This release adds the new Apache HTTP Server 2.4.29 packages that are part
of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services
Apache HTTP Server 2.4.23, and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes,
enhancements and component upgrades included in this release.
This release upgrades OpenSSL to version 1.0.2.n
Security Fix(es):
* openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() (CVE-2016-2182)
* openssl: Insufficient TLS session ticket HMAC length checks (CVE-2016-6302)
* openssl: certificate message OOB reads (CVE-2016-6306)
* openssl: Carry propagating bug in Montgomery multiplication (CVE-2016-7055)
* openssl: Truncated packet could crash via OOB read (CVE-2017-3731)
* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* openssl: Read/write after SSL object in error state (CVE-2017-3737)
* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6306
and CVE-2016-7055. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6306.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this release as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.29 packages that are part\nof the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services\nApache HTTP Server 2.4.23, and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes,\nenhancements and component upgrades included in this release.\n\nThis release upgrades OpenSSL to version 1.0.2.n\n\nSecurity Fix(es):\n\n* openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() (CVE-2016-2182)\n\n* openssl: Insufficient TLS session ticket HMAC length checks (CVE-2016-6302)\n\n* openssl: certificate message OOB reads (CVE-2016-6306)\n\n* openssl: Carry propagating bug in Montgomery multiplication (CVE-2016-7055)\n\n* openssl: Truncated packet could crash via OOB read (CVE-2017-3731)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* openssl: Read/write after SSL object in error state (CVE-2017-3737)\n\n* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-6306 \nand CVE-2016-7055. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6306.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2185",
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/"
},
{
"category": "external",
"summary": "1367340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367340"
},
{
"category": "external",
"summary": "1369855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369855"
},
{
"category": "external",
"summary": "1377594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377594"
},
{
"category": "external",
"summary": "1393929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393929"
},
{
"category": "external",
"summary": "1416852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416852"
},
{
"category": "external",
"summary": "1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1523504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504"
},
{
"category": "external",
"summary": "1523510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510"
},
{
"category": "external",
"summary": "JBCS-373",
"url": "https://issues.redhat.com/browse/JBCS-373"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2185.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 7 security update",
"tracking": {
"current_release_date": "2024-11-22T11:16:03+00:00",
"generator": {
"date": "2024-11-22T11:16:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2185",
"initial_release_date": "2018-07-12T16:14:46+00:00",
"revision_history": [
{
"date": "2018-07-12T16:14:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-12T16:14:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T11:16:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt-debuginfo@2.4.1-19.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-19.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-17.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx-debuginfo@0.9.6-17.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb-debuginfo@5.4-36.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.8-1.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.8-1.Final_redhat_2.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.43-1.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.43-1.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.43-1.redhat_1.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-14.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-14.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-14.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-9.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2n-11.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2n-11.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2n-11.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2n-11.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2n-11.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2n-11.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.29.0-8.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.29.0-8.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.29.0-8.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.1-23.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-23.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-17.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-17.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-17.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc@1.1.0-1.redhat_2.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo@1.1.0-1.redhat_2.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_rt@2.4.1-19.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_bmx@0.9.6-17.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_auth_kerb@5.4-36.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.8-1.Final_redhat_2.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.43-1.redhat_1.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"product_id": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-14.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"product_id": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-9.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"product_id": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2n-11.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"product_id": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.29.0-8.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-23.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-17.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"product_id": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon-jsvc@1.1.0-1.redhat_2.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"product_id": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon@1.1.0-1.redhat_2.1.jbcs.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.29-17.jbcs.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"product": {
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"product_id": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-apache-commons-daemon@1.1.0-1.redhat_2.1.jbcs.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2182",
"cwe": {
"id": "CWE-391",
"name": "Unchecked Error Condition"
},
"discovery_date": "2016-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1367340"
}
],
"notes": [
{
"category": "description",
"text": "An out of bounds write flaw was discovered in the OpenSSL BN_bn2dec() function. An attacker able to make an application using OpenSSL to process a large BIGNUM could cause the application to crash or, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2182"
},
{
"category": "external",
"summary": "RHBZ#1367340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367340"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2182",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2182"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()"
},
{
"cve": "CVE-2016-4975",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2016-09-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1375968"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache was vulnerable to a HTTP response splitting attack for sites which use mod_userdir. An attacker could use this flaw to inject CRLF characters into the HTTP header and could possibly gain access to secure data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4975"
},
{
"category": "external",
"summary": "RHBZ#1375968",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1375968"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4975",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4975"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4975",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4975"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975",
"url": "https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975"
}
],
"release_date": "2018-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir"
},
{
"cve": "CVE-2016-6302",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-08-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1369855"
}
],
"notes": [
{
"category": "description",
"text": "An integer underflow flaw leading to a buffer over-read was found in the way OpenSSL parsed TLS session tickets. A remote attacker could use this flaw to crash a TLS server using OpenSSL if it used SHA-512 as HMAC for session tickets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Insufficient TLS session ticket HMAC length checks",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6302"
},
{
"category": "external",
"summary": "RHBZ#1369855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6302",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6302"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6302",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6302"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-08-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Insufficient TLS session ticket HMAC length checks"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc.",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-6306",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-09-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1377594"
}
],
"notes": [
{
"category": "description",
"text": "Multiple out of bounds read flaws were found in the way OpenSSL handled certain TLS/SSL protocol handshake messages. A remote attacker could possibly use these flaws to crash a TLS/SSL server or client using OpenSSL.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: certificate message OOB reads",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6306"
},
{
"category": "external",
"summary": "RHBZ#1377594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6306",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6306"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-09-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 1.2,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: certificate message OOB reads"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
}
],
"cve": "CVE-2016-7055",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2016-10-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1393929"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker\u0027s direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Carry propagating bug in Montgomery multiplication",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-7055"
},
{
"category": "external",
"summary": "RHBZ#1393929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-7055",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7055"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-7055",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7055"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20161110.txt",
"url": "https://www.openssl.org/news/secadv/20161110.txt"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2016-10-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Carry propagating bug in Montgomery multiplication"
},
{
"cve": "CVE-2017-3731",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416852"
}
],
"notes": [
{
"category": "description",
"text": "An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Truncated packet could crash via OOB read",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3731"
},
{
"category": "external",
"summary": "RHBZ#1416852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416852"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3731",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3731"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3731",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3731"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Truncated packet could crash via OOB read"
},
{
"cve": "CVE-2017-3732",
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416856"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: BN_mod_exp may produce incorrect results on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "RHBZ#1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3732",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: BN_mod_exp may produce incorrect results on x86_64"
},
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2017-3737",
"cwe": {
"id": "CWE-391",
"name": "Unchecked Error Condition"
},
"discovery_date": "2017-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1523504"
}
],
"notes": [
{
"category": "description",
"text": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Read/write after SSL object in error state",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3737"
},
{
"category": "external",
"summary": "RHBZ#1523504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3737",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3737"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3737",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3737"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171207.txt",
"url": "https://www.openssl.org/news/secadv/20171207.txt"
}
],
"release_date": "2017-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Read/write after SSL object in error state"
},
{
"cve": "CVE-2017-3738",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2017-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1523510"
}
],
"notes": [
{
"category": "description",
"text": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: rsaz_1024_mul_avx2 overflow bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3738"
},
{
"category": "external",
"summary": "RHBZ#1523510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3738",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3738"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3738",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3738"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171207.txt",
"url": "https://www.openssl.org/news/secadv/20171207.txt"
}
],
"release_date": "2017-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:14:46+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-0:1.1.0-1.redhat_2.1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apache-commons-daemon-jsvc-debuginfo-1:1.1.0-1.redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-14.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-9.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-17.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_auth_kerb-debuginfo-0:5.4-36.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_bmx-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_bmx-debuginfo-0:0.9.6-17.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.8-1.Final_redhat_2.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.43-1.redhat_1.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.43-1.redhat_1.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_rt-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_rt-debuginfo-0:2.4.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-23.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-17.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-nghttp2-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.29.0-8.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2n-11.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2n-11.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: rsaz_1024_mul_avx2 overflow bug on x86_64"
}
]
}
rhsa-2018_2713
Vulnerability from csaf_redhat
Published
2018-09-17 14:54
Modified
2024-11-15 02:12
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP20.
Security Fix(es):
* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* IBM JDK: DoS in the java.math component (CVE-2018-1517)
* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
* OpenSSL: Double-free in DSA code (CVE-2016-0705)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Satellite 5.8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP20.\n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\n* OpenSSL: Double-free in DSA code (CVE-2016-0705)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2713",
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2713.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2024-11-15T02:12:51+00:00",
"generator": {
"date": "2024-11-15T02:12:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2713",
"initial_release_date": "2018-09-17T14:54:13+00:00",
"revision_history": [
{
"date": "2018-09-17T14:54:13+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-09-17T14:54:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T02:12:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product": {
"name": "Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:network_satellite:5.8::el6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Satellite58"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Satellite 5.8 (RHEL v.6)",
"product_id": "6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Satellite58"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Adam Langley"
],
"organization": "Google/BoringSSL",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0705",
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310596"
}
],
"notes": [
{
"category": "description",
"text": "A double-free flaw was found in the way OpenSSL parsed certain malformed DSA (Digital Signature Algorithm) private keys. An attacker could create specially crafted DSA private keys that, when processed by an application compiled against OpenSSL, could cause the application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: Double-free in DSA code",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0705"
},
{
"category": "external",
"summary": "RHBZ#1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0705",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0705"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705"
}
],
"release_date": "2016-02-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenSSL: Double-free in DSA code"
},
{
"cve": "CVE-2017-3732",
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416856"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: BN_mod_exp may produce incorrect results on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "RHBZ#1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3732",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: BN_mod_exp may produce incorrect results on x86_64"
},
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2018-1517",
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618871"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: DoS in the java.math component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "RHBZ#1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: DoS in the java.math component"
},
{
"cve": "CVE-2018-1656",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618869"
}
],
"notes": [
{
"category": "description",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: path traversal flaw in the Diagnostic Tooling Framework",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "RHBZ#1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: path traversal flaw in the Diagnostic Tooling Framework"
},
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-12539",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618767"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: privilege escalation via insufficiently restricted access to Attach API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "RHBZ#1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12539",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539"
}
],
"release_date": "2018-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-09-17T14:54:13+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor this update to take effect, Red Hat Satellite must be restarted (\"/usr/sbin/rhn-satellite restart\"). All running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Satellite58:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: privilege escalation via insufficiently restricted access to Attach API"
}
]
}
rhsa-2018_2575
Vulnerability from csaf_redhat
Published
2018-08-28 19:19
Modified
2024-11-15 02:12
Summary
Red Hat Security Advisory: java-1.8.0-ibm security update
Notes
Topic
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP20.
Security Fix(es):
* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* IBM JDK: DoS in the java.math component (CVE-2018-1517)
* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
* OpenSSL: Double-free in DSA code (CVE-2016-0705)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.\n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP20.\n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)\n\n* OpenSSL: Double-free in DSA code (CVE-2016-0705)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2575",
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2575.json"
}
],
"title": "Red Hat Security Advisory: java-1.8.0-ibm security update",
"tracking": {
"current_release_date": "2024-11-15T02:12:25+00:00",
"generator": {
"date": "2024-11-15T02:12:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2575",
"initial_release_date": "2018-08-28T19:19:26+00:00",
"revision_history": [
{
"date": "2018-08-28T19:19:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-08-28T19:19:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-15T02:12:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_extras:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux Supplementary"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.20-1jpp.1.el6_10?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-plugin@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el6_10?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el6_10?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-demo@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-src@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-devel@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_id": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/java-1.8.0-ibm-jdbc@1.8.0.5.20-1jpp.1.el6_10?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)",
"product_id": "6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Client-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux HPC Node Supplementary (v. 6)",
"product_id": "6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6ComputeNode-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)",
"product_id": "6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Server-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)",
"product_id": "6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
},
"product_reference": "java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"relates_to_product_reference": "6Workstation-Supplementary-6.10.z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Adam Langley"
],
"organization": "Google/BoringSSL",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-0705",
"discovery_date": "2016-02-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1310596"
}
],
"notes": [
{
"category": "description",
"text": "A double-free flaw was found in the way OpenSSL parsed certain malformed DSA (Digital Signature Algorithm) private keys. An attacker could create specially crafted DSA private keys that, when processed by an application compiled against OpenSSL, could cause the application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: Double-free in DSA code",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0705"
},
{
"category": "external",
"summary": "RHBZ#1310596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0705",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0705"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0705"
}
],
"release_date": "2016-02-18T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenSSL: Double-free in DSA code"
},
{
"cve": "CVE-2017-3732",
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416856"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: BN_mod_exp may produce incorrect results on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "RHBZ#1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3732",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: BN_mod_exp may produce incorrect results on x86_64"
},
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2018-1517",
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618871"
}
],
"notes": [
{
"category": "description",
"text": "A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: DoS in the java.math component",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1517"
},
{
"category": "external",
"summary": "RHBZ#1618871",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618871"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1517",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1517"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: DoS in the java.math component"
},
{
"cve": "CVE-2018-1656",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618869"
}
],
"notes": [
{
"category": "description",
"text": "The IBM Java Runtime Environment\u0027s Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against path traversal attacks when extracting compressed dump files. IBM X-Force ID: 144882.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: path traversal flaw in the Diagnostic Tooling Framework",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-1656"
},
{
"category": "external",
"summary": "RHBZ#1618869",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618869"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-1656",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-1656"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1656"
}
],
"release_date": "2018-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: path traversal flaw in the Diagnostic Tooling Framework"
},
{
"cve": "CVE-2018-2940",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602146"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2940"
},
{
"category": "external",
"summary": "RHBZ#1602146",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602146"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2940",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2940"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)"
},
{
"cve": "CVE-2018-2952",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2018-07-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1600925"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2952"
},
{
"category": "external",
"summary": "RHBZ#1600925",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1600925"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2952",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2952"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2952"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)"
},
{
"cve": "CVE-2018-2973",
"discovery_date": "2018-07-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1602145"
}
],
"notes": [
{
"category": "description",
"text": "Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-2973"
},
{
"category": "external",
"summary": "RHBZ#1602145",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1602145"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-2973",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-2973"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-2973"
},
{
"category": "external",
"summary": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixJAVA"
}
],
"release_date": "2018-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)"
},
{
"cve": "CVE-2018-12539",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2018-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1618767"
}
],
"notes": [
{
"category": "description",
"text": "In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach API operations, which includes the ability to execute untrusted native code. Attach API is enabled by default on Windows, Linux and AIX JVMs and can be disabled using the command line option -Dcom.ibm.tools.attach.enable=no.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "JDK: privilege escalation via insufficiently restricted access to Attach API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2018-12539"
},
{
"category": "external",
"summary": "RHBZ#1618767",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618767"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2018-12539",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-12539"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12539"
}
],
"release_date": "2018-05-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-08-28T19:19:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take effect.",
"product_ids": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Client-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6ComputeNode-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Server-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-demo-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-devel-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-jdbc-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-plugin-1:1.8.0.5.20-1jpp.1.el6_10.x86_64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.i686",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.ppc64",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.s390x",
"6Workstation-Supplementary-6.10.z:java-1.8.0-ibm-src-1:1.8.0.5.20-1jpp.1.el6_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "JDK: privilege escalation via insufficiently restricted access to Attach API"
}
]
}
rhsa-2018_2187
Vulnerability from csaf_redhat
Published
2018-07-12 16:04
Modified
2024-11-22 11:16
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update
Notes
Topic
Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available.
Red Hat Product Security has rated this release as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details
This release adds the new Apache HTTP Server 2.4.29 packages that are part
of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services
Apache HTTP Server 2.4.23, and includes bug fixes and enhancements. Refer
to the Release Notes for information on the most significant bug fixes,
enhancements and component upgrades included in this release.
This release upgrades OpenSSL to version 1.0.2.n
Security Fix(es):
* openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() (CVE-2016-2182)
* openssl: Insufficient TLS session ticket HMAC length checks (CVE-2016-6302)
* openssl: certificate message OOB reads (CVE-2016-6306)
* openssl: Carry propagating bug in Montgomery multiplication (CVE-2016-7055)
* openssl: Truncated packet could crash via OOB read (CVE-2017-3731)
* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* openssl: Read/write after SSL object in error state (CVE-2017-3737)
* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6306
and CVE-2016-7055. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360
Inc.) as the original reporter of CVE-2016-6306.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available.\n\nRed Hat Product Security has rated this release as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "This release adds the new Apache HTTP Server 2.4.29 packages that are part\nof the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services\nApache HTTP Server 2.4.23, and includes bug fixes and enhancements. Refer\nto the Release Notes for information on the most significant bug fixes,\nenhancements and component upgrades included in this release.\n\nThis release upgrades OpenSSL to version 1.0.2.n\n\nSecurity Fix(es):\n\n* openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() (CVE-2016-2182)\n\n* openssl: Insufficient TLS session ticket HMAC length checks (CVE-2016-6302)\n\n* openssl: certificate message OOB reads (CVE-2016-6306)\n\n* openssl: Carry propagating bug in Montgomery multiplication (CVE-2016-7055)\n\n* openssl: Truncated packet could crash via OOB read (CVE-2017-3731)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* openssl: Read/write after SSL object in error state (CVE-2017-3737)\n\n* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-6306\nand CVE-2016-7055. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360\nInc.) as the original reporter of CVE-2016-6306.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:2187",
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/",
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/"
},
{
"category": "external",
"summary": "1367340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367340"
},
{
"category": "external",
"summary": "1369855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369855"
},
{
"category": "external",
"summary": "1377594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377594"
},
{
"category": "external",
"summary": "1393929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393929"
},
{
"category": "external",
"summary": "1416852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416852"
},
{
"category": "external",
"summary": "1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1523504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504"
},
{
"category": "external",
"summary": "1523510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2187.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update",
"tracking": {
"current_release_date": "2024-11-22T11:16:15+00:00",
"generator": {
"date": "2024-11-22T11:16:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:2187",
"initial_release_date": "2018-07-12T16:04:49+00:00",
"revision_history": [
{
"date": "2018-07-12T16:04:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-07-12T16:04:49+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T11:16:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services 1",
"product": {
"name": "Red Hat JBoss Core Services 1",
"product_id": "Red Hat JBoss Core Services 1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-2182",
"cwe": {
"id": "CWE-391",
"name": "Unchecked Error Condition"
},
"discovery_date": "2016-08-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1367340"
}
],
"notes": [
{
"category": "description",
"text": "An out of bounds write flaw was discovered in the OpenSSL BN_bn2dec() function. An attacker able to make an application using OpenSSL to process a large BIGNUM could cause the application to crash or, possibly, execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2182"
},
{
"category": "external",
"summary": "RHBZ#1367340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367340"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2182",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2182"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-08-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:04:49+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()"
},
{
"cve": "CVE-2016-6302",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-08-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1369855"
}
],
"notes": [
{
"category": "description",
"text": "An integer underflow flaw leading to a buffer over-read was found in the way OpenSSL parsed TLS session tickets. A remote attacker could use this flaw to crash a TLS server using OpenSSL if it used SHA-512 as HMAC for session tickets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Insufficient TLS session ticket HMAC length checks",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6302"
},
{
"category": "external",
"summary": "RHBZ#1369855",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369855"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6302",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6302"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6302",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6302"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-08-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:04:49+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Insufficient TLS session ticket HMAC length checks"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc.",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-6306",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-09-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1377594"
}
],
"notes": [
{
"category": "description",
"text": "Multiple out of bounds read flaws were found in the way OpenSSL handled certain TLS/SSL protocol handshake messages. A remote attacker could possibly use these flaws to crash a TLS/SSL server or client using OpenSSL.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: certificate message OOB reads",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6306"
},
{
"category": "external",
"summary": "RHBZ#1377594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6306",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6306"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-09-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:04:49+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 1.2,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: certificate message OOB reads"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
}
],
"cve": "CVE-2016-7055",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2016-10-11T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1393929"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker\u0027s direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Carry propagating bug in Montgomery multiplication",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-7055"
},
{
"category": "external",
"summary": "RHBZ#1393929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-7055",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7055"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-7055",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7055"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20161110.txt",
"url": "https://www.openssl.org/news/secadv/20161110.txt"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2016-10-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:04:49+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Carry propagating bug in Montgomery multiplication"
},
{
"cve": "CVE-2017-3731",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416852"
}
],
"notes": [
{
"category": "description",
"text": "An integer underflow leading to an out of bounds read flaw was found in OpenSSL. A remote attacker could possibly use this flaw to crash a 32-bit TLS/SSL server or client using OpenSSL if it used the RC4-MD5 cipher suite.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Truncated packet could crash via OOB read",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3731"
},
{
"category": "external",
"summary": "RHBZ#1416852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416852"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3731",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3731"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3731",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3731"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:04:49+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Truncated packet could crash via OOB read"
},
{
"cve": "CVE-2017-3732",
"discovery_date": "2017-01-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1416856"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: BN_mod_exp may produce incorrect results on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3732"
},
{
"category": "external",
"summary": "RHBZ#1416856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3732",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3732"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3732"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20170126.txt",
"url": "https://www.openssl.org/news/secadv/20170126.txt"
}
],
"release_date": "2017-01-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:04:49+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: BN_mod_exp may produce incorrect results on x86_64"
},
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:04:49+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2017-3737",
"cwe": {
"id": "CWE-391",
"name": "Unchecked Error Condition"
},
"discovery_date": "2017-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1523504"
}
],
"notes": [
{
"category": "description",
"text": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Read/write after SSL object in error state",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3737"
},
{
"category": "external",
"summary": "RHBZ#1523504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3737",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3737"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3737",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3737"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171207.txt",
"url": "https://www.openssl.org/news/secadv/20171207.txt"
}
],
"release_date": "2017-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:04:49+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Read/write after SSL object in error state"
},
{
"cve": "CVE-2017-3738",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2017-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1523510"
}
],
"notes": [
{
"category": "description",
"text": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: rsaz_1024_mul_avx2 overflow bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat JBoss Core Services 1"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3738"
},
{
"category": "external",
"summary": "RHBZ#1523510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3738",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3738"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3738",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3738"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171207.txt",
"url": "https://www.openssl.org/news/secadv/20171207.txt"
}
],
"release_date": "2017-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-07-12T16:04:49+00:00",
"details": "The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files).\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically.",
"product_ids": [
"Red Hat JBoss Core Services 1"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"Red Hat JBoss Core Services 1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: rsaz_1024_mul_avx2 overflow bug on x86_64"
}
]
}
rhsa-2018_0998
Vulnerability from csaf_redhat
Published
2018-04-10 11:21
Modified
2024-11-22 11:16
Summary
Red Hat Security Advisory: openssl security and bug fix update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
* openssl: Read/write after SSL object in error state (CVE-2017-3737)
* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openssl is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* openssl: Read/write after SSL object in error state (CVE-2017-3737)\n\n* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2018:0998",
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html",
"url": "https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html"
},
{
"category": "external",
"summary": "1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "1523504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504"
},
{
"category": "external",
"summary": "1523510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0998.json"
}
],
"title": "Red Hat Security Advisory: openssl security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T11:16:08+00:00",
"generator": {
"date": "2024-11-22T11:16:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2018:0998",
"initial_release_date": "2018-04-10T11:21:46+00:00",
"revision_history": [
{
"date": "2018-04-10T11:21:46+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2018-04-10T11:21:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T11:16:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-static-1:1.0.2k-12.el7.x86_64",
"product": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64",
"product_id": "openssl-static-1:1.0.2k-12.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-static@1.0.2k-12.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"product": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"product_id": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-12.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"product": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"product_id": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-12.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"product": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"product_id": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-12.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"product": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"product_id": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-12.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:1.0.2k-12.el7.x86_64",
"product": {
"name": "openssl-1:1.0.2k-12.el7.x86_64",
"product_id": "openssl-1:1.0.2k-12.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@1.0.2k-12.el7?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-static-1:1.0.2k-12.el7.i686",
"product": {
"name": "openssl-static-1:1.0.2k-12.el7.i686",
"product_id": "openssl-static-1:1.0.2k-12.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-static@1.0.2k-12.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"product": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"product_id": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-12.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:1.0.2k-12.el7.i686",
"product": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686",
"product_id": "openssl-libs-1:1.0.2k-12.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-12.el7?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:1.0.2k-12.el7.i686",
"product": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686",
"product_id": "openssl-devel-1:1.0.2k-12.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-12.el7?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1:1.0.2k-12.el7.src",
"product": {
"name": "openssl-1:1.0.2k-12.el7.src",
"product_id": "openssl-1:1.0.2k-12.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@1.0.2k-12.el7?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-libs-1:1.0.2k-12.el7.ppc",
"product": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc",
"product_id": "openssl-libs-1:1.0.2k-12.el7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-12.el7?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:1.0.2k-12.el7.ppc",
"product": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc",
"product_id": "openssl-devel-1:1.0.2k-12.el7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-12.el7?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"product": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"product_id": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-12.el7?arch=ppc\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-static-1:1.0.2k-12.el7.ppc",
"product": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc",
"product_id": "openssl-static-1:1.0.2k-12.el7.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-static@1.0.2k-12.el7?arch=ppc\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"product": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"product_id": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-12.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"product": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"product_id": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-12.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:1.0.2k-12.el7.ppc64",
"product": {
"name": "openssl-1:1.0.2k-12.el7.ppc64",
"product_id": "openssl-1:1.0.2k-12.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@1.0.2k-12.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"product": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"product_id": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-12.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-static-1:1.0.2k-12.el7.ppc64",
"product": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64",
"product_id": "openssl-static-1:1.0.2k-12.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-static@1.0.2k-12.el7?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"product": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"product_id": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-12.el7?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-libs-1:1.0.2k-12.el7.s390",
"product": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390",
"product_id": "openssl-libs-1:1.0.2k-12.el7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-12.el7?arch=s390\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:1.0.2k-12.el7.s390",
"product": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390",
"product_id": "openssl-devel-1:1.0.2k-12.el7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-12.el7?arch=s390\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"product": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"product_id": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-12.el7?arch=s390\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-static-1:1.0.2k-12.el7.s390",
"product": {
"name": "openssl-static-1:1.0.2k-12.el7.s390",
"product_id": "openssl-static-1:1.0.2k-12.el7.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-static@1.0.2k-12.el7?arch=s390\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-libs-1:1.0.2k-12.el7.s390x",
"product": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x",
"product_id": "openssl-libs-1:1.0.2k-12.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-12.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:1.0.2k-12.el7.s390x",
"product": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x",
"product_id": "openssl-devel-1:1.0.2k-12.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-12.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:1.0.2k-12.el7.s390x",
"product": {
"name": "openssl-1:1.0.2k-12.el7.s390x",
"product_id": "openssl-1:1.0.2k-12.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@1.0.2k-12.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"product": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"product_id": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-12.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-static-1:1.0.2k-12.el7.s390x",
"product": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x",
"product_id": "openssl-static-1:1.0.2k-12.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-static@1.0.2k-12.el7?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:1.0.2k-12.el7.s390x",
"product": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x",
"product_id": "openssl-perl-1:1.0.2k-12.el7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-12.el7?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"product": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"product_id": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-12.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"product": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"product_id": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-12.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:1.0.2k-12.el7.ppc64le",
"product": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le",
"product_id": "openssl-1:1.0.2k-12.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@1.0.2k-12.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"product": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"product_id": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-12.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"product": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"product_id": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-static@1.0.2k-12.el7?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"product": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"product_id": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-12.el7?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-static-1:1.0.2k-12.el7.aarch64",
"product": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64",
"product_id": "openssl-static-1:1.0.2k-12.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-static@1.0.2k-12.el7?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"product": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"product_id": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-12.el7?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"product": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"product_id": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-12.el7?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"product": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"product_id": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-12.el7?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"product": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"product_id": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-12.el7?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:1.0.2k-12.el7.aarch64",
"product": {
"name": "openssl-1:1.0.2k-12.el7.aarch64",
"product_id": "openssl-1:1.0.2k-12.el7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@1.0.2k-12.el7?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)",
"product_id": "7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)",
"product_id": "7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)",
"product_id": "7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-Alt-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src"
},
"product_reference": "openssl-1:1.0.2k-12.el7.src",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-devel-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-libs-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-perl-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.i686",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.s390x",
"relates_to_product_reference": "7Workstation-optional-7.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static-1:1.0.2k-12.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
},
"product_reference": "openssl-static-1:1.0.2k-12.el7.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-3736",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"discovery_date": "2017-11-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1509169"
}
],
"notes": [
{
"category": "description",
"text": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: bn_sqrx8x_internal carry bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3736"
},
{
"category": "external",
"summary": "RHBZ#1509169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3736",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171102.txt",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
}
],
"release_date": "2017-11-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-10T11:21:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: bn_sqrx8x_internal carry bug on x86_64"
},
{
"cve": "CVE-2017-3737",
"cwe": {
"id": "CWE-391",
"name": "Unchecked Error Condition"
},
"discovery_date": "2017-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1523504"
}
],
"notes": [
{
"category": "description",
"text": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Read/write after SSL object in error state",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3737"
},
{
"category": "external",
"summary": "RHBZ#1523504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3737",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3737"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3737",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3737"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171207.txt",
"url": "https://www.openssl.org/news/secadv/20171207.txt"
}
],
"release_date": "2017-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-10T11:21:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Read/write after SSL object in error state"
},
{
"cve": "CVE-2017-3738",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2017-12-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1523510"
}
],
"notes": [
{
"category": "description",
"text": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: rsaz_1024_mul_avx2 overflow bug on x86_64",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2017-3738"
},
{
"category": "external",
"summary": "RHBZ#1523510",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2017-3738",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3738"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-3738",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3738"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20171207.txt",
"url": "https://www.openssl.org/news/secadv/20171207.txt"
}
],
"release_date": "2017-12-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2018-04-10T11:21:46+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Client-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Client-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7ComputeNode-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7ComputeNode-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-Alt-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-Alt-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Server-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Server-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-7.5:openssl-static-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.src",
"7Workstation-optional-7.5:openssl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-debuginfo-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-devel-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-libs-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-perl-1:1.0.2k-12.el7.x86_64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.aarch64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.i686",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.ppc64le",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.s390x",
"7Workstation-optional-7.5:openssl-static-1:1.0.2k-12.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: rsaz_1024_mul_avx2 overflow bug on x86_64"
}
]
}
wid-sec-w-2024-0206
Vulnerability from csaf_certbund
Published
2017-11-02 23:00
Modified
2024-06-03 22:00
Summary
OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.
Angriff
Ein lokaler Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Betroffene Betriebssysteme
- Linux
- NetApp Appliance
- UNIX
- Windows
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "OpenSSL ist eine im Quelltext frei verf\u00fcgbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- NetApp Appliance\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-0206 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2017/wid-sec-w-2024-0206.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-0206 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0206"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4018 vom 2017-11-04",
"url": "https://www.debian.org/security/2017/dsa-4018"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4017 vom 2017-11-04",
"url": "https://www.debian.org/security/2017/dsa-4017"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3475-1 vom 2017-11-06",
"url": "http://www.ubuntu.com/usn/usn-3475-1/"
},
{
"category": "external",
"summary": "OpenSSL Security Advisory vom 2017-11-02",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"category": "external",
"summary": "NetAPP Security Advisory NTAP-20171107-0002 vom 2017-11-08",
"url": "https://security.netapp.com/advisory/ntap-20171107-0002/"
},
{
"category": "external",
"summary": "FreeBSD Security Advisory FREEBSD-SA-17:11.OPENSSL vom 2017-11-29",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2017:3169-1 vom 2017-12-01",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173169-1.html"
},
{
"category": "external",
"summary": "Tenable Security Advisory ID: TNS-2017-15",
"url": "https://www.tenable.com/security/tns-2017-15"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2017:3343-1 vom 2017-12-16",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173343-1.html"
},
{
"category": "external",
"summary": "F5 Security Advisory K14363514 vom 2017-12-15",
"url": "https://support.f5.com/csp/article/K14363514"
},
{
"category": "external",
"summary": "McAfee Security Bulletin: SB10220",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10220"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:0002-1 vom 2018-01-02",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20180002-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:0293-1 vom 2018-01-30",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20180293-1.html"
},
{
"category": "external",
"summary": "Juniper Security Advisory JSA10851 vom 2018-04-12",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10851"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-4077 vom 2018-04-19",
"url": "http://linux.oracle.com/errata/ELSA-2018-4077.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13",
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
},
{
"category": "external",
"summary": "Hitachi Security Information hitachi-sec-2018-124",
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-124/index.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2568 vom 2018-08-27",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2568.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:2839-1 vom 2018-09-24",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182839-1.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13",
"url": "http://linux.oracle.com/errata/ELSA-2019-4581.html"
},
{
"category": "external",
"summary": "Dell Knowledge Base Article",
"url": "https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities"
},
{
"category": "external",
"summary": "SolarWinds Platform 2024.2 release notes vom 2024-06-04",
"url": "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm"
}
],
"source_lang": "en-US",
"title": "OpenSSL: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen",
"tracking": {
"current_release_date": "2024-06-03T22:00:00.000+00:00",
"generator": {
"date": "2024-06-04T08:07:35.117+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2024-0206",
"initial_release_date": "2017-11-02T23:00:00.000+00:00",
"revision_history": [
{
"date": "2017-11-02T23:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2017-11-02T23:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-11-05T23:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2017-11-06T23:00:00.000+00:00",
"number": "4",
"summary": "New remediations available"
},
{
"date": "2017-11-06T23:00:00.000+00:00",
"number": "5",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-11-13T23:00:00.000+00:00",
"number": "6",
"summary": "Added references"
},
{
"date": "2017-11-13T23:00:00.000+00:00",
"number": "7",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-11-14T23:00:00.000+00:00",
"number": "8",
"summary": "Added references"
},
{
"date": "2017-11-30T23:00:00.000+00:00",
"number": "9",
"summary": "New remediations available"
},
{
"date": "2017-12-07T23:00:00.000+00:00",
"number": "10",
"summary": "New remediations available"
},
{
"date": "2017-12-14T23:00:00.000+00:00",
"number": "11",
"summary": "Added references"
},
{
"date": "2017-12-21T23:00:00.000+00:00",
"number": "12",
"summary": "New remediations available"
},
{
"date": "2018-01-02T23:00:00.000+00:00",
"number": "13",
"summary": "New remediations available"
},
{
"date": "2018-01-02T23:00:00.000+00:00",
"number": "14",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-01-30T23:00:00.000+00:00",
"number": "15",
"summary": "New remediations available"
},
{
"date": "2018-04-12T22:00:00.000+00:00",
"number": "16",
"summary": "New remediations available"
},
{
"date": "2018-04-12T22:00:00.000+00:00",
"number": "17",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-04-18T22:00:00.000+00:00",
"number": "18",
"summary": "New remediations available"
},
{
"date": "2018-07-12T22:00:00.000+00:00",
"number": "19",
"summary": "New remediations available"
},
{
"date": "2018-08-07T22:00:00.000+00:00",
"number": "20",
"summary": "New remediations available"
},
{
"date": "2018-08-07T22:00:00.000+00:00",
"number": "21",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-08-07T22:00:00.000+00:00",
"number": "22",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-08-07T22:00:00.000+00:00",
"number": "23",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-08-27T22:00:00.000+00:00",
"number": "24",
"summary": "New remediations available"
},
{
"date": "2018-09-24T22:00:00.000+00:00",
"number": "25",
"summary": "New remediations available"
},
{
"date": "2019-03-13T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-01-25T23:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2024-06-03T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates aufgenommen"
}
],
"status": "final",
"version": "28"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c19.10",
"product": {
"name": "Dell NetWorker \u003c19.10",
"product_id": "T032354",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:19.10"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "FreeBSD Project FreeBSD OS",
"product": {
"name": "FreeBSD Project FreeBSD OS",
"product_id": "4035",
"product_identification_helper": {
"cpe": "cpe:/o:freebsd:freebsd:-"
}
}
}
],
"category": "vendor",
"name": "FreeBSD Project"
},
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Command Suite",
"product": {
"name": "Hitachi Command Suite",
"product_id": "T010951",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:command_suite:-"
}
}
}
],
"category": "vendor",
"name": "Hitachi"
},
{
"branches": [
{
"category": "product_name",
"name": "Juniper JUNOS",
"product": {
"name": "Juniper JUNOS",
"product_id": "5930",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:-"
}
}
}
],
"category": "vendor",
"name": "Juniper"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp Data ONTAP",
"product": {
"name": "NetApp Data ONTAP",
"product_id": "7654",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:data_ontap:-"
}
}
},
{
"category": "product_name",
"name": "NetApp OnCommand Unified Manager",
"product": {
"name": "NetApp OnCommand Unified Manager",
"product_id": "T009408",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:oncommand_unified_manager:-"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c1.1.0g",
"product": {
"name": "Open Source OpenSSL \u003c1.1.0g",
"product_id": "T011150",
"product_identification_helper": {
"cpe": "cpe:/a:openssl:openssl:1.1.0g"
}
}
},
{
"category": "product_version_range",
"name": "\u003c1.0.2m",
"product": {
"name": "Open Source OpenSSL \u003c1.0.2m",
"product_id": "T011151",
"product_identification_helper": {
"cpe": "cpe:/a:openssl:openssl:1.0.2m"
}
}
}
],
"category": "product_name",
"name": "OpenSSL"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2024.2",
"product": {
"name": "SolarWinds Platform \u003c2024.2",
"product_id": "T035149",
"product_identification_helper": {
"cpe": "cpe:/a:solarwinds:orion_platform:2024.2"
}
}
}
],
"category": "product_name",
"name": "Platform"
}
],
"category": "vendor",
"name": "SolarWinds"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-3736",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in OpenSSL im Zusammenhang mit der x86_64 Implementierung des Montgomery Leiters. Ein anonymer Angreifer mit physikalischem Zugang zur CPU kann diese Schwachstelle nutzen, um an den privaten Schl\u00fcssel zu kommen. Zur erfolgreichen Ausnutzung dieser Schwachstelle muss der Angreifer ein System finden, welche mit persistenten DH Parametern arbeitet und einen privaten Schl\u00fcssel belauschen, welche von mehreren Systemen benutzt wird. Algorithmen zur Berechnung von elliptischen Kurven sind nicht betroffen, RSA und DSA Algorithmen sind nur mit erheblichem Aufwand angreifbar. Bei DH geht man von einem vertretbaren Aufwand f\u00fcr eine sehr geringe Angreifergruppe aus, da der Aufwand f\u00fcr den Angriff auch hier gro\u00df ist. Betroffen sind die CPUs, welche BMI1, BMI2 und ADX Erweiterungen unterst\u00fctzen z. B. Intel Broadwell (5th generation) und neuere oder AMD Ryzen."
}
],
"product_status": {
"known_affected": [
"T035149",
"2951",
"T002207",
"T009408",
"67646",
"4035",
"T000126",
"7654",
"T010951",
"5930",
"T004914",
"T032354"
]
},
"release_date": "2017-11-02T23:00:00Z",
"title": "CVE-2017-3736"
}
]
}
WID-SEC-W-2024-0206
Vulnerability from csaf_certbund
Published
2017-11-02 23:00
Modified
2024-06-03 22:00
Summary
OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
OpenSSL ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.
Angriff
Ein lokaler Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Betroffene Betriebssysteme
- Linux
- NetApp Appliance
- UNIX
- Windows
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "OpenSSL ist eine im Quelltext frei verf\u00fcgbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- NetApp Appliance\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-0206 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2017/wid-sec-w-2024-0206.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-0206 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0206"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4018 vom 2017-11-04",
"url": "https://www.debian.org/security/2017/dsa-4018"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4017 vom 2017-11-04",
"url": "https://www.debian.org/security/2017/dsa-4017"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-3475-1 vom 2017-11-06",
"url": "http://www.ubuntu.com/usn/usn-3475-1/"
},
{
"category": "external",
"summary": "OpenSSL Security Advisory vom 2017-11-02",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"category": "external",
"summary": "NetAPP Security Advisory NTAP-20171107-0002 vom 2017-11-08",
"url": "https://security.netapp.com/advisory/ntap-20171107-0002/"
},
{
"category": "external",
"summary": "FreeBSD Security Advisory FREEBSD-SA-17:11.OPENSSL vom 2017-11-29",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2017:3169-1 vom 2017-12-01",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173169-1.html"
},
{
"category": "external",
"summary": "Tenable Security Advisory ID: TNS-2017-15",
"url": "https://www.tenable.com/security/tns-2017-15"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2017:3343-1 vom 2017-12-16",
"url": "https://www.suse.com/support/update/announcement/2017/suse-su-20173343-1.html"
},
{
"category": "external",
"summary": "F5 Security Advisory K14363514 vom 2017-12-15",
"url": "https://support.f5.com/csp/article/K14363514"
},
{
"category": "external",
"summary": "McAfee Security Bulletin: SB10220",
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10220"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:0002-1 vom 2018-01-02",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20180002-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:0293-1 vom 2018-01-30",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20180293-1.html"
},
{
"category": "external",
"summary": "Juniper Security Advisory JSA10851 vom 2018-04-12",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10851"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2018-4077 vom 2018-04-19",
"url": "http://linux.oracle.com/errata/ELSA-2018-4077.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13",
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
},
{
"category": "external",
"summary": "Hitachi Security Information hitachi-sec-2018-124",
"url": "http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-124/index.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2018:2568 vom 2018-08-27",
"url": "http://rhn.redhat.com/errata/RHSA-2018-2568.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2018:2839-1 vom 2018-09-24",
"url": "https://www.suse.com/support/update/announcement/2018/suse-su-20182839-1.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13",
"url": "http://linux.oracle.com/errata/ELSA-2019-4581.html"
},
{
"category": "external",
"summary": "Dell Knowledge Base Article",
"url": "https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities"
},
{
"category": "external",
"summary": "SolarWinds Platform 2024.2 release notes vom 2024-06-04",
"url": "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm"
}
],
"source_lang": "en-US",
"title": "OpenSSL: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen",
"tracking": {
"current_release_date": "2024-06-03T22:00:00.000+00:00",
"generator": {
"date": "2024-06-04T08:07:35.117+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2024-0206",
"initial_release_date": "2017-11-02T23:00:00.000+00:00",
"revision_history": [
{
"date": "2017-11-02T23:00:00.000+00:00",
"number": "1",
"summary": "Initial Release"
},
{
"date": "2017-11-02T23:00:00.000+00:00",
"number": "2",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-11-05T23:00:00.000+00:00",
"number": "3",
"summary": "New remediations available"
},
{
"date": "2017-11-06T23:00:00.000+00:00",
"number": "4",
"summary": "New remediations available"
},
{
"date": "2017-11-06T23:00:00.000+00:00",
"number": "5",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-11-13T23:00:00.000+00:00",
"number": "6",
"summary": "Added references"
},
{
"date": "2017-11-13T23:00:00.000+00:00",
"number": "7",
"summary": "Version nicht vorhanden"
},
{
"date": "2017-11-14T23:00:00.000+00:00",
"number": "8",
"summary": "Added references"
},
{
"date": "2017-11-30T23:00:00.000+00:00",
"number": "9",
"summary": "New remediations available"
},
{
"date": "2017-12-07T23:00:00.000+00:00",
"number": "10",
"summary": "New remediations available"
},
{
"date": "2017-12-14T23:00:00.000+00:00",
"number": "11",
"summary": "Added references"
},
{
"date": "2017-12-21T23:00:00.000+00:00",
"number": "12",
"summary": "New remediations available"
},
{
"date": "2018-01-02T23:00:00.000+00:00",
"number": "13",
"summary": "New remediations available"
},
{
"date": "2018-01-02T23:00:00.000+00:00",
"number": "14",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-01-30T23:00:00.000+00:00",
"number": "15",
"summary": "New remediations available"
},
{
"date": "2018-04-12T22:00:00.000+00:00",
"number": "16",
"summary": "New remediations available"
},
{
"date": "2018-04-12T22:00:00.000+00:00",
"number": "17",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-04-18T22:00:00.000+00:00",
"number": "18",
"summary": "New remediations available"
},
{
"date": "2018-07-12T22:00:00.000+00:00",
"number": "19",
"summary": "New remediations available"
},
{
"date": "2018-08-07T22:00:00.000+00:00",
"number": "20",
"summary": "New remediations available"
},
{
"date": "2018-08-07T22:00:00.000+00:00",
"number": "21",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-08-07T22:00:00.000+00:00",
"number": "22",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-08-07T22:00:00.000+00:00",
"number": "23",
"summary": "Version nicht vorhanden"
},
{
"date": "2018-08-27T22:00:00.000+00:00",
"number": "24",
"summary": "New remediations available"
},
{
"date": "2018-09-24T22:00:00.000+00:00",
"number": "25",
"summary": "New remediations available"
},
{
"date": "2019-03-13T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-01-25T23:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2024-06-03T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates aufgenommen"
}
],
"status": "final",
"version": "28"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c19.10",
"product": {
"name": "Dell NetWorker \u003c19.10",
"product_id": "T032354",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:19.10"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "FreeBSD Project FreeBSD OS",
"product": {
"name": "FreeBSD Project FreeBSD OS",
"product_id": "4035",
"product_identification_helper": {
"cpe": "cpe:/o:freebsd:freebsd:-"
}
}
}
],
"category": "vendor",
"name": "FreeBSD Project"
},
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Command Suite",
"product": {
"name": "Hitachi Command Suite",
"product_id": "T010951",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:command_suite:-"
}
}
}
],
"category": "vendor",
"name": "Hitachi"
},
{
"branches": [
{
"category": "product_name",
"name": "Juniper JUNOS",
"product": {
"name": "Juniper JUNOS",
"product_id": "5930",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:-"
}
}
}
],
"category": "vendor",
"name": "Juniper"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp Data ONTAP",
"product": {
"name": "NetApp Data ONTAP",
"product_id": "7654",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:data_ontap:-"
}
}
},
{
"category": "product_name",
"name": "NetApp OnCommand Unified Manager",
"product": {
"name": "NetApp OnCommand Unified Manager",
"product_id": "T009408",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:oncommand_unified_manager:-"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c1.1.0g",
"product": {
"name": "Open Source OpenSSL \u003c1.1.0g",
"product_id": "T011150",
"product_identification_helper": {
"cpe": "cpe:/a:openssl:openssl:1.1.0g"
}
}
},
{
"category": "product_version_range",
"name": "\u003c1.0.2m",
"product": {
"name": "Open Source OpenSSL \u003c1.0.2m",
"product_id": "T011151",
"product_identification_helper": {
"cpe": "cpe:/a:openssl:openssl:1.0.2m"
}
}
}
],
"category": "product_name",
"name": "OpenSSL"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2024.2",
"product": {
"name": "SolarWinds Platform \u003c2024.2",
"product_id": "T035149",
"product_identification_helper": {
"cpe": "cpe:/a:solarwinds:orion_platform:2024.2"
}
}
}
],
"category": "product_name",
"name": "Platform"
}
],
"category": "vendor",
"name": "SolarWinds"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2017-3736",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in OpenSSL im Zusammenhang mit der x86_64 Implementierung des Montgomery Leiters. Ein anonymer Angreifer mit physikalischem Zugang zur CPU kann diese Schwachstelle nutzen, um an den privaten Schl\u00fcssel zu kommen. Zur erfolgreichen Ausnutzung dieser Schwachstelle muss der Angreifer ein System finden, welche mit persistenten DH Parametern arbeitet und einen privaten Schl\u00fcssel belauschen, welche von mehreren Systemen benutzt wird. Algorithmen zur Berechnung von elliptischen Kurven sind nicht betroffen, RSA und DSA Algorithmen sind nur mit erheblichem Aufwand angreifbar. Bei DH geht man von einem vertretbaren Aufwand f\u00fcr eine sehr geringe Angreifergruppe aus, da der Aufwand f\u00fcr den Angriff auch hier gro\u00df ist. Betroffen sind die CPUs, welche BMI1, BMI2 und ADX Erweiterungen unterst\u00fctzen z. B. Intel Broadwell (5th generation) und neuere oder AMD Ryzen."
}
],
"product_status": {
"known_affected": [
"T035149",
"2951",
"T002207",
"T009408",
"67646",
"4035",
"T000126",
"7654",
"T010951",
"5930",
"T004914",
"T032354"
]
},
"release_date": "2017-11-02T23:00:00Z",
"title": "CVE-2017-3736"
}
]
}
WID-SEC-W-2023-1594
Vulnerability from csaf_certbund
Published
2023-06-28 22:00
Modified
2023-06-28 22:00
Summary
IBM Tivoli Network Manager: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM Tivoli Network Manager ist eine Netzanalysesoftware für das Management komplexer Netze. Diese Software erfasst und verteilt Layer-2- und Layer-3-Netzdaten.
Angriff
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- Sonstiges
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "IBM Tivoli Network Manager ist eine Netzanalysesoftware f\u00fcr das Management komplexer Netze. Diese Software erfasst und verteilt Layer-2- und Layer-3-Netzdaten.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-1594 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1594.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-1594 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1594"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/885316"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/884276"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/883428"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/883424"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/882926"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/882898"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/882888"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/880403"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/880401"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/880395"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/879855"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/879841"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870546"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870526"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870508"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870504"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870500"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870498"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/743933"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739297"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739271"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739249"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739247"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739245"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739243"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/738231"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/731931"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730883"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730871"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730845"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730835"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730171"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/720307"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/720283"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/720265"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/718745"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/717345"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/717335"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/717327"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/717007"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/716573"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/712213"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/712199"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/570557"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/569765"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/569727"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/569717"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/305321"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/304091"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/304089"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/303663"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/303657"
}
],
"source_lang": "en-US",
"title": "IBM Tivoli Network Manager: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-06-28T22:00:00.000+00:00",
"generator": {
"date": "2024-02-15T17:33:19.626+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-1594",
"initial_release_date": "2023-06-28T22:00:00.000+00:00",
"revision_history": [
{
"date": "2023-06-28T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9 Fix Pack 5",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9 Fix Pack 5",
"product_id": "T028343",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9_fix_pack_5"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9",
"product_id": "T028344",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 4.1.1",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 4.1.1",
"product_id": "T028345",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__4.1.1"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 4.2",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 4.2",
"product_id": "T028346",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__4.2"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9.0.4",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9.0.4",
"product_id": "T028347",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9.0.4"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9.0.5",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9.0.5",
"product_id": "T028348",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9.0.5"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9 Fix Pack 4",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9 Fix Pack 4",
"product_id": "T028349",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9_fix_pack_4"
}
}
}
],
"category": "product_name",
"name": "Tivoli Network Manager"
}
],
"category": "vendor",
"name": "IBM"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-4046",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-4046"
},
{
"cve": "CVE-2019-4030",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-4030"
},
{
"cve": "CVE-2019-2684",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2684"
},
{
"cve": "CVE-2019-2602",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2602"
},
{
"cve": "CVE-2019-2537",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2537"
},
{
"cve": "CVE-2019-2534",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2534"
},
{
"cve": "CVE-2019-2531",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2531"
},
{
"cve": "CVE-2019-2529",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2529"
},
{
"cve": "CVE-2019-2503",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2503"
},
{
"cve": "CVE-2019-2482",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2482"
},
{
"cve": "CVE-2019-2481",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2481"
},
{
"cve": "CVE-2019-2455",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2455"
},
{
"cve": "CVE-2019-1559",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-1559"
},
{
"cve": "CVE-2019-0220",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-0220"
},
{
"cve": "CVE-2018-8039",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-8039"
},
{
"cve": "CVE-2018-5407",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-5407"
},
{
"cve": "CVE-2018-3282",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3282"
},
{
"cve": "CVE-2018-3278",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3278"
},
{
"cve": "CVE-2018-3276",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3276"
},
{
"cve": "CVE-2018-3251",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3251"
},
{
"cve": "CVE-2018-3247",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3247"
},
{
"cve": "CVE-2018-3174",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3174"
},
{
"cve": "CVE-2018-3156",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3156"
},
{
"cve": "CVE-2018-3143",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3143"
},
{
"cve": "CVE-2018-3123",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3123"
},
{
"cve": "CVE-2018-3084",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3084"
},
{
"cve": "CVE-2018-3082",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3082"
},
{
"cve": "CVE-2018-3081",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3081"
},
{
"cve": "CVE-2018-3080",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3080"
},
{
"cve": "CVE-2018-3079",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3079"
},
{
"cve": "CVE-2018-3078",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3078"
},
{
"cve": "CVE-2018-3077",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3077"
},
{
"cve": "CVE-2018-3075",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3075"
},
{
"cve": "CVE-2018-3074",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3074"
},
{
"cve": "CVE-2018-3073",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3073"
},
{
"cve": "CVE-2018-3071",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3071"
},
{
"cve": "CVE-2018-3070",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3070"
},
{
"cve": "CVE-2018-3067",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3067"
},
{
"cve": "CVE-2018-3066",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3066"
},
{
"cve": "CVE-2018-3065",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3065"
},
{
"cve": "CVE-2018-3064",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3064"
},
{
"cve": "CVE-2018-3063",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3063"
},
{
"cve": "CVE-2018-3062",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3062"
},
{
"cve": "CVE-2018-3061",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3061"
},
{
"cve": "CVE-2018-3060",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3060"
},
{
"cve": "CVE-2018-3058",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3058"
},
{
"cve": "CVE-2018-3056",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3056"
},
{
"cve": "CVE-2018-3054",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3054"
},
{
"cve": "CVE-2018-2877",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2877"
},
{
"cve": "CVE-2018-2846",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2846"
},
{
"cve": "CVE-2018-2839",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2839"
},
{
"cve": "CVE-2018-2819",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2819"
},
{
"cve": "CVE-2018-2818",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2818"
},
{
"cve": "CVE-2018-2817",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2817"
},
{
"cve": "CVE-2018-2816",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2816"
},
{
"cve": "CVE-2018-2813",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2813"
},
{
"cve": "CVE-2018-2812",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2812"
},
{
"cve": "CVE-2018-2810",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2810"
},
{
"cve": "CVE-2018-2805",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2805"
},
{
"cve": "CVE-2018-2787",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2787"
},
{
"cve": "CVE-2018-2786",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2786"
},
{
"cve": "CVE-2018-2784",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2784"
},
{
"cve": "CVE-2018-2782",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2782"
},
{
"cve": "CVE-2018-2781",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2781"
},
{
"cve": "CVE-2018-2780",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2780"
},
{
"cve": "CVE-2018-2779",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2779"
},
{
"cve": "CVE-2018-2778",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2778"
},
{
"cve": "CVE-2018-2777",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2777"
},
{
"cve": "CVE-2018-2776",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2776"
},
{
"cve": "CVE-2018-2775",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2775"
},
{
"cve": "CVE-2018-2773",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2773"
},
{
"cve": "CVE-2018-2771",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2771"
},
{
"cve": "CVE-2018-2769",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2769"
},
{
"cve": "CVE-2018-2766",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2766"
},
{
"cve": "CVE-2018-2762",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2762"
},
{
"cve": "CVE-2018-2761",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2761"
},
{
"cve": "CVE-2018-2759",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2759"
},
{
"cve": "CVE-2018-2758",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2758"
},
{
"cve": "CVE-2018-2755",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2755"
},
{
"cve": "CVE-2018-2598",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2598"
},
{
"cve": "CVE-2018-1996",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1996"
},
{
"cve": "CVE-2018-1926",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1926"
},
{
"cve": "CVE-2018-1904",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1904"
},
{
"cve": "CVE-2018-1902",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1902"
},
{
"cve": "CVE-2018-1901",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1901"
},
{
"cve": "CVE-2018-1798",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1798"
},
{
"cve": "CVE-2018-1797",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1797"
},
{
"cve": "CVE-2018-1794",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1794"
},
{
"cve": "CVE-2018-1793",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1793"
},
{
"cve": "CVE-2018-1777",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1777"
},
{
"cve": "CVE-2018-1770",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1770"
},
{
"cve": "CVE-2018-1767",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1767"
},
{
"cve": "CVE-2018-1719",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1719"
},
{
"cve": "CVE-2018-1695",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1695"
},
{
"cve": "CVE-2018-1656",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1656"
},
{
"cve": "CVE-2018-1643",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1643"
},
{
"cve": "CVE-2018-1621",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1621"
},
{
"cve": "CVE-2018-1614",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1614"
},
{
"cve": "CVE-2018-1567",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1567"
},
{
"cve": "CVE-2018-1447",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1447"
},
{
"cve": "CVE-2018-1428",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1428"
},
{
"cve": "CVE-2018-1427",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1427"
},
{
"cve": "CVE-2018-1426",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1426"
},
{
"cve": "CVE-2018-1301",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1301"
},
{
"cve": "CVE-2018-12539",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-10237",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-10237"
},
{
"cve": "CVE-2018-0734",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-0734"
},
{
"cve": "CVE-2018-0732",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-0732"
},
{
"cve": "CVE-2017-9798",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-9798"
},
{
"cve": "CVE-2017-3738",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3738"
},
{
"cve": "CVE-2017-3737",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3737"
},
{
"cve": "CVE-2017-3736",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3736"
},
{
"cve": "CVE-2017-3735",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3735"
},
{
"cve": "CVE-2017-3732",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3732"
},
{
"cve": "CVE-2017-1743",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-1743"
},
{
"cve": "CVE-2017-1741",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-1741"
},
{
"cve": "CVE-2017-1731",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-1731"
},
{
"cve": "CVE-2017-1681",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-1681"
},
{
"cve": "CVE-2017-15715",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-15715"
},
{
"cve": "CVE-2017-15710",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-15710"
},
{
"cve": "CVE-2017-12624",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-12624"
},
{
"cve": "CVE-2017-12618",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-12618"
},
{
"cve": "CVE-2017-12613",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-12613"
},
{
"cve": "CVE-2016-0705",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2016-0705"
},
{
"cve": "CVE-2016-0702",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2016-0702"
},
{
"cve": "CVE-2016-0701",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2016-0701"
},
{
"cve": "CVE-2015-0899",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2015-0899"
},
{
"cve": "CVE-2014-7810",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2014-7810"
},
{
"cve": "CVE-2012-5783",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2012-5783"
}
]
}
wid-sec-w-2023-1594
Vulnerability from csaf_certbund
Published
2023-06-28 22:00
Modified
2023-06-28 22:00
Summary
IBM Tivoli Network Manager: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM Tivoli Network Manager ist eine Netzanalysesoftware für das Management komplexer Netze. Diese Software erfasst und verteilt Layer-2- und Layer-3-Netzdaten.
Angriff
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
- Sonstiges
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "IBM Tivoli Network Manager ist eine Netzanalysesoftware f\u00fcr das Management komplexer Netze. Diese Software erfasst und verteilt Layer-2- und Layer-3-Netzdaten.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- UNIX\n- Linux\n- Windows\n- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-1594 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1594.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-1594 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1594"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/885316"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/884276"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/883428"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/883424"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/882926"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/882898"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/882888"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/880403"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/880401"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/880395"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/879855"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/879841"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870546"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870526"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870508"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870504"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870500"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/870498"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/743933"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739297"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739271"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739249"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739247"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739245"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/739243"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/738231"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/731931"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730883"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730871"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730845"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730835"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/730171"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/720307"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/720283"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/720265"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/718745"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/717345"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/717335"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/717327"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/717007"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/716573"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/712213"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/712199"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/570557"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/569765"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/569727"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/569717"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/305321"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/304091"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/304089"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/303663"
},
{
"category": "external",
"summary": "IBM Security Advisory vom 2023-06-28",
"url": "https://www.ibm.com/support/pages/node/303657"
}
],
"source_lang": "en-US",
"title": "IBM Tivoli Network Manager: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-06-28T22:00:00.000+00:00",
"generator": {
"date": "2024-02-15T17:33:19.626+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.0"
}
},
"id": "WID-SEC-W-2023-1594",
"initial_release_date": "2023-06-28T22:00:00.000+00:00",
"revision_history": [
{
"date": "2023-06-28T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9 Fix Pack 5",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9 Fix Pack 5",
"product_id": "T028343",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9_fix_pack_5"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9",
"product_id": "T028344",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 4.1.1",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 4.1.1",
"product_id": "T028345",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__4.1.1"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 4.2",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 4.2",
"product_id": "T028346",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__4.2"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9.0.4",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9.0.4",
"product_id": "T028347",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9.0.4"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9.0.5",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9.0.5",
"product_id": "T028348",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9.0.5"
}
}
},
{
"category": "product_name",
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9 Fix Pack 4",
"product": {
"name": "IBM Tivoli Network Manager IP Edition \u003c 3.9 Fix Pack 4",
"product_id": "T028349",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition__3.9_fix_pack_4"
}
}
}
],
"category": "product_name",
"name": "Tivoli Network Manager"
}
],
"category": "vendor",
"name": "IBM"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-4046",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-4046"
},
{
"cve": "CVE-2019-4030",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-4030"
},
{
"cve": "CVE-2019-2684",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2684"
},
{
"cve": "CVE-2019-2602",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2602"
},
{
"cve": "CVE-2019-2537",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2537"
},
{
"cve": "CVE-2019-2534",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2534"
},
{
"cve": "CVE-2019-2531",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2531"
},
{
"cve": "CVE-2019-2529",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2529"
},
{
"cve": "CVE-2019-2503",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2503"
},
{
"cve": "CVE-2019-2482",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2482"
},
{
"cve": "CVE-2019-2481",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2481"
},
{
"cve": "CVE-2019-2455",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-2455"
},
{
"cve": "CVE-2019-1559",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-1559"
},
{
"cve": "CVE-2019-0220",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2019-0220"
},
{
"cve": "CVE-2018-8039",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-8039"
},
{
"cve": "CVE-2018-5407",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-5407"
},
{
"cve": "CVE-2018-3282",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3282"
},
{
"cve": "CVE-2018-3278",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3278"
},
{
"cve": "CVE-2018-3276",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3276"
},
{
"cve": "CVE-2018-3251",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3251"
},
{
"cve": "CVE-2018-3247",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3247"
},
{
"cve": "CVE-2018-3174",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3174"
},
{
"cve": "CVE-2018-3156",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3156"
},
{
"cve": "CVE-2018-3143",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3143"
},
{
"cve": "CVE-2018-3123",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3123"
},
{
"cve": "CVE-2018-3084",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3084"
},
{
"cve": "CVE-2018-3082",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3082"
},
{
"cve": "CVE-2018-3081",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3081"
},
{
"cve": "CVE-2018-3080",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3080"
},
{
"cve": "CVE-2018-3079",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3079"
},
{
"cve": "CVE-2018-3078",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3078"
},
{
"cve": "CVE-2018-3077",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3077"
},
{
"cve": "CVE-2018-3075",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3075"
},
{
"cve": "CVE-2018-3074",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3074"
},
{
"cve": "CVE-2018-3073",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3073"
},
{
"cve": "CVE-2018-3071",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3071"
},
{
"cve": "CVE-2018-3070",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3070"
},
{
"cve": "CVE-2018-3067",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3067"
},
{
"cve": "CVE-2018-3066",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3066"
},
{
"cve": "CVE-2018-3065",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3065"
},
{
"cve": "CVE-2018-3064",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3064"
},
{
"cve": "CVE-2018-3063",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3063"
},
{
"cve": "CVE-2018-3062",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3062"
},
{
"cve": "CVE-2018-3061",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3061"
},
{
"cve": "CVE-2018-3060",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3060"
},
{
"cve": "CVE-2018-3058",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3058"
},
{
"cve": "CVE-2018-3056",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3056"
},
{
"cve": "CVE-2018-3054",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-3054"
},
{
"cve": "CVE-2018-2877",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2877"
},
{
"cve": "CVE-2018-2846",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2846"
},
{
"cve": "CVE-2018-2839",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2839"
},
{
"cve": "CVE-2018-2819",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2819"
},
{
"cve": "CVE-2018-2818",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2818"
},
{
"cve": "CVE-2018-2817",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2817"
},
{
"cve": "CVE-2018-2816",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2816"
},
{
"cve": "CVE-2018-2813",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2813"
},
{
"cve": "CVE-2018-2812",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2812"
},
{
"cve": "CVE-2018-2810",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2810"
},
{
"cve": "CVE-2018-2805",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2805"
},
{
"cve": "CVE-2018-2787",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2787"
},
{
"cve": "CVE-2018-2786",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2786"
},
{
"cve": "CVE-2018-2784",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2784"
},
{
"cve": "CVE-2018-2782",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2782"
},
{
"cve": "CVE-2018-2781",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2781"
},
{
"cve": "CVE-2018-2780",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2780"
},
{
"cve": "CVE-2018-2779",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2779"
},
{
"cve": "CVE-2018-2778",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2778"
},
{
"cve": "CVE-2018-2777",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2777"
},
{
"cve": "CVE-2018-2776",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2776"
},
{
"cve": "CVE-2018-2775",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2775"
},
{
"cve": "CVE-2018-2773",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2773"
},
{
"cve": "CVE-2018-2771",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2771"
},
{
"cve": "CVE-2018-2769",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2769"
},
{
"cve": "CVE-2018-2766",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2766"
},
{
"cve": "CVE-2018-2762",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2762"
},
{
"cve": "CVE-2018-2761",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2761"
},
{
"cve": "CVE-2018-2759",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2759"
},
{
"cve": "CVE-2018-2758",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2758"
},
{
"cve": "CVE-2018-2755",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2755"
},
{
"cve": "CVE-2018-2598",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-2598"
},
{
"cve": "CVE-2018-1996",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1996"
},
{
"cve": "CVE-2018-1926",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1926"
},
{
"cve": "CVE-2018-1904",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1904"
},
{
"cve": "CVE-2018-1902",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1902"
},
{
"cve": "CVE-2018-1901",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1901"
},
{
"cve": "CVE-2018-1798",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1798"
},
{
"cve": "CVE-2018-1797",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1797"
},
{
"cve": "CVE-2018-1794",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1794"
},
{
"cve": "CVE-2018-1793",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1793"
},
{
"cve": "CVE-2018-1777",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1777"
},
{
"cve": "CVE-2018-1770",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1770"
},
{
"cve": "CVE-2018-1767",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1767"
},
{
"cve": "CVE-2018-1719",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1719"
},
{
"cve": "CVE-2018-1695",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1695"
},
{
"cve": "CVE-2018-1656",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1656"
},
{
"cve": "CVE-2018-1643",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1643"
},
{
"cve": "CVE-2018-1621",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1621"
},
{
"cve": "CVE-2018-1614",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1614"
},
{
"cve": "CVE-2018-1567",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1567"
},
{
"cve": "CVE-2018-1447",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1447"
},
{
"cve": "CVE-2018-1428",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1428"
},
{
"cve": "CVE-2018-1427",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1427"
},
{
"cve": "CVE-2018-1426",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1426"
},
{
"cve": "CVE-2018-1301",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-1301"
},
{
"cve": "CVE-2018-12539",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-12539"
},
{
"cve": "CVE-2018-10237",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-10237"
},
{
"cve": "CVE-2018-0734",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-0734"
},
{
"cve": "CVE-2018-0732",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2018-0732"
},
{
"cve": "CVE-2017-9798",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-9798"
},
{
"cve": "CVE-2017-3738",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3738"
},
{
"cve": "CVE-2017-3737",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3737"
},
{
"cve": "CVE-2017-3736",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3736"
},
{
"cve": "CVE-2017-3735",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3735"
},
{
"cve": "CVE-2017-3732",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-3732"
},
{
"cve": "CVE-2017-1743",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-1743"
},
{
"cve": "CVE-2017-1741",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-1741"
},
{
"cve": "CVE-2017-1731",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-1731"
},
{
"cve": "CVE-2017-1681",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-1681"
},
{
"cve": "CVE-2017-15715",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-15715"
},
{
"cve": "CVE-2017-15710",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-15710"
},
{
"cve": "CVE-2017-12624",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-12624"
},
{
"cve": "CVE-2017-12618",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-12618"
},
{
"cve": "CVE-2017-12613",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2017-12613"
},
{
"cve": "CVE-2016-0705",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2016-0705"
},
{
"cve": "CVE-2016-0702",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2016-0702"
},
{
"cve": "CVE-2016-0701",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2016-0701"
},
{
"cve": "CVE-2015-0899",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2015-0899"
},
{
"cve": "CVE-2014-7810",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2014-7810"
},
{
"cve": "CVE-2012-5783",
"notes": [
{
"category": "description",
"text": "In IBM Tivoli Network Manager existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in den Komponenten OpenSSL, Apache CXF, Apache HTTPD, Oracle MySQL, Apache Commons, Apache Struts, IBM GSKit, Java SDK, Eclipse OpenJ9 und SAML. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Privilegien auszuweiten, Daten zu manipulieren, nicht spezifizierte Auswirkungen zu verursachen und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Berechtigungen."
}
],
"release_date": "2023-06-28T22:00:00Z",
"title": "CVE-2012-5783"
}
]
}
var-201711-0923
Vulnerability from variot
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen. Description:
This release adds the new Apache HTTP Server 2.4.29 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.23, and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes, enhancements and component upgrades included in this release.
This release upgrades OpenSSL to version 1.0.2.n
Security Fix(es):
-
openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() (CVE-2016-2182)
-
openssl: Insufficient TLS session ticket HMAC length checks (CVE-2016-6302)
-
openssl: certificate message OOB reads (CVE-2016-6306)
-
openssl: Carry propagating bug in Montgomery multiplication (CVE-2016-7055)
-
openssl: Truncated packet could crash via OOB read (CVE-2017-3731)
-
openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
-
openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
-
openssl: Read/write after SSL object in error state (CVE-2017-3737)
-
openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6306 and CVE-2016-7055. Solution:
Before applying this update, make sure all previously released errata relevant to your system have been applied. Bugs fixed (https://bugzilla.redhat.com/):
1367340 - CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec() 1369855 - CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks 1377594 - CVE-2016-6306 openssl: certificate message OOB reads 1393929 - CVE-2016-7055 openssl: Carry propagating bug in Montgomery multiplication 1416852 - CVE-2017-3731 openssl: Truncated packet could crash via OOB read 1416856 - CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64 1509169 - CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64 1523504 - CVE-2017-3737 openssl: Read/write after SSL object in error state 1523510 - CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64
- JIRA issues fixed (https://issues.jboss.org/):
JBCS-373 - Errata for httpd 2.4.29 GA RHEL 7
- ========================================================================== Ubuntu Security Notice USN-3475-1 November 06, 2017
openssl vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.10
- Ubuntu 17.04
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in OpenSSL.
Software Description: - openssl: Secure Socket Layer (SSL) cryptographic library and tools
Details:
It was discovered that OpenSSL incorrectly parsed the IPAddressFamily extension in X.509 certificates, resulting in an erroneous display of the certificate in text format. While unlikely, a remote attacker could possibly use this issue to recover private keys. This issue only applied to Ubuntu 16.04 LTS, Ubuntu 16.10 and Ubuntu 17.04. (CVE-2017-3736)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 17.10: libssl1.0.0 1.0.2g-1ubuntu13.2
Ubuntu 17.04: libssl1.0.0 1.0.2g-1ubuntu11.3
Ubuntu 16.04 LTS: libssl1.0.0 1.0.2g-1ubuntu4.9
Ubuntu 14.04 LTS: libssl1.0.0 1.0.1f-1ubuntu2.23
After a standard system update you need to reboot your computer to make all the necessary changes.
Gentoo Linux Security Advisory GLSA 201712-03
https://security.gentoo.org/
Severity: Normal Title: OpenSSL: Multiple vulnerabilities Date: December 14, 2017 Bugs: #629290, #636264, #640172 ID: 201712-03
Synopsis
Multiple vulnerabilities have been found in OpenSSL, the worst of which may lead to a Denial of Service condition.
Background
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.
Affected packages
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 dev-libs/openssl < 1.0.2n >= 1.0.2n
Description
Multiple vulnerabilities have been discovered in OpenSSL. Please review the referenced CVE identifiers for details.
Impact
A remote attacker could cause a Denial of Service condition, recover a private key in unlikely circumstances, circumvent security restrictions to perform unauthorized actions, or gain access to sensitive information.
Workaround
There are no known workarounds at this time.
Resolution
All OpenSSL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/openssl-1.0.2n"
References
[ 1 ] CVE-2017-3735 https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3735 [ 2 ] CVE-2017-3736 https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3736 [ 3 ] CVE-2017-3737 https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3737 [ 4 ] CVE-2017-3738 https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3738
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/201712-03
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2017 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5
--IrEhWFjxIJsFtqH1v1HHQsLm3nLmhNeP4--
. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
====================================================================
Red Hat Security Advisory
Synopsis: Important: java-1.8.0-ibm security update Advisory ID: RHSA-2018:2575-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2018:2575 Issue date: 2018-08-28 CVE Names: CVE-2016-0705 CVE-2017-3732 CVE-2017-3736 CVE-2018-1517 CVE-2018-1656 CVE-2018-2940 CVE-2018-2952 CVE-2018-2973 CVE-2018-12539 ==================================================================== 1. Summary:
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node Supplementary (v. 6) - x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64
- Description:
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.
This update upgrades IBM Java SE 8 to version 8 SR5-FP20.
Security Fix(es):
-
IBM JDK: privilege escalation via insufficiently restricted access to Attach API (CVE-2018-12539)
-
openssl: BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
-
openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)
-
IBM JDK: DoS in the java.math component (CVE-2018-1517)
-
IBM JDK: path traversal flaw in the Diagnostic Tooling Framework (CVE-2018-1656)
-
Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) (CVE-2018-2940)
-
OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)
-
Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) (CVE-2018-2973)
-
OpenSSL: Double-free in DSA code (CVE-2016-0705)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the original reporter of CVE-2016-0705.
- Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
All running instances of IBM Java must be restarted for this update to take effect.
- Bugs fixed (https://bugzilla.redhat.com/):
1310596 - CVE-2016-0705 OpenSSL: Double-free in DSA code 1416856 - CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64 1509169 - CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64 1600925 - CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) 1602145 - CVE-2018-2973 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE) 1602146 - CVE-2018-2940 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries) 1618767 - CVE-2018-12539 IBM JDK: privilege escalation via insufficiently restricted access to Attach API 1618869 - CVE-2018-1656 IBM JDK: path traversal flaw in the Diagnostic Tooling Framework 1618871 - CVE-2018-1517 IBM JDK: DoS in the java.math component
- Package List:
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386: java-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.i686.rpm
x86_64: java-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.x86_64.rpm
Red Hat Enterprise Linux HPC Node Supplementary (v. 6):
x86_64: java-1.8.0-ibm-1.8.0.5.20-1jpp.1.el6_10.x86_64.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386: java-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.i686.rpm
ppc64: java-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.ppc64.rpm
s390x: java-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.s390x.rpm
x86_64: java-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.x86_64.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386: java-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.i686.rpm
x86_64: java-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2016-0705 https://access.redhat.com/security/cve/CVE-2017-3732 https://access.redhat.com/security/cve/CVE-2017-3736 https://access.redhat.com/security/cve/CVE-2018-1517 https://access.redhat.com/security/cve/CVE-2018-1656 https://access.redhat.com/security/cve/CVE-2018-2940 https://access.redhat.com/security/cve/CVE-2018-2952 https://access.redhat.com/security/cve/CVE-2018-2973 https://access.redhat.com/security/cve/CVE-2018-12539 https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/
Copyright 2018 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIVAwUBW4WgLdzjgjWX9erEAQixyw//d2pemlb2TNR2kW3WlrxY0KBjUBM+PS4i bQ8+SoNsct2XtVFq0oOfwAmYMn++pAY37yvvhUdefe5sAcUldDcJtLIgXbtISSXe V5EdrLvQbv/rSxikOfccFzNI8GwJTgGiLpq8n9exHcSsY5cZevzukgRr6b+yQbnj mcYEC3TB/CnulDac/Pt0VsS9AoFhwuX958/+EQdpMq1yOGqog6eM8U6x2btA4YSi mcVD2hom6GuYMKq0oWDPWPry5hJePvbPM6GZw8pYdRvA1eKjp24M3mkWkkIEFw6U aZCW6YXJuwMMJ4IYbF1Aofm3ab+R1VZXmPvzMHXRhVcRyZLvBzo1fZaw7ISX1ibV FimDRrXLIJDudoS80DMVmbgQTL37U6pGAe6gV2JLtvtEZl02Sxq5PeRfuMME4qeP rT+xyz0zjyIqTpxhAzAQJ28ZCrWDvRycCT5ZLwaPfxZ0+4cY1l58TMfYpdwIKJSC M8HQccrNxQ8S/kSKexIT18mSQcMwOhDza6gV4hSiOQgI/xHW3sic78a7/74JnSBT DgZuicAq73IWdYu67B04UzsZNsySSW6vs3BeYdfN5BnmK40NxrH5d5LMRV4xKmN+ HlkzX1CrDCBl9PtbQF0xpUGluvXCg1u2kzGHj4Dv7JP64bV1wXmLm5kwrPL/QZhv 8IL8kIZinC8=eoiE -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . OpenSSL Security Advisory [07 Dec 2017] ========================================
Read/write after SSL object in error state (CVE-2017-3737)
Severity: Moderate
OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer.
In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error.
This issue does not affect OpenSSL 1.1.0.
OpenSSL 1.0.2 users should upgrade to 1.0.2n
This issue was reported to OpenSSL on 10th November 2017 by David Benjamin (Google). The fix was proposed by David Benjamin and implemented by Matt Caswell of the OpenSSL development team.
rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
Severity: Low
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli.
Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193.
Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.
OpenSSL 1.0.2 users should upgrade to 1.0.2n
This issue was reported to OpenSSL on 22nd November 2017 by David Benjamin (Google). The issue was originally found via the OSS-Fuzz project. The fix was developed by Andy Polyakov of the OpenSSL development team.
Note
Support for version 1.0.1 ended on 31st December 2016. Support for versions 0.9.8 and 1.0.0 ended on 31st December 2015. Those versions are no longer receiving security updates.
References
URL for this Security Advisory: https://www.openssl.org/news/secadv/20171207.txt
Note: the online version of the advisory may be updated with additional details over time.
For details of OpenSSL severity classifications please see: https://www.openssl.org/policies/secpolicy.html . OpenSSL Security Advisory [27 Mar 2018] ========================================
Constructed ASN.1 types with a recursive definition could exceed the stack (CVE-2018-0739)
Severity: Moderate
Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe.
Incorrect CRYPTO_memcmp on HP-UX PA-RISC (CVE-2018-0733)
Severity: Moderate
Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201711-0923",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "openssl",
"scope": "gte",
"trust": 1.0,
"vendor": "openssl",
"version": "1.0.2"
},
{
"model": "openssl",
"scope": "lt",
"trust": 1.0,
"vendor": "openssl",
"version": "1.0.2m"
},
{
"model": "openssl",
"scope": "gte",
"trust": 1.0,
"vendor": "openssl",
"version": "1.1.0"
},
{
"model": "openssl",
"scope": "lt",
"trust": 1.0,
"vendor": "openssl",
"version": "1.1.0g"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.8,
"vendor": "openssl",
"version": "1.1.0g"
},
{
"model": "openssl",
"scope": "lt",
"trust": 0.8,
"vendor": "openssl",
"version": "1.1.0"
},
{
"model": "compute systems manager",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "infrastructure analytics advisor",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "jp1/performance management",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "- web console"
},
{
"model": "jp1/automatic job management system 3",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "- web console (windows"
},
{
"model": "automation director",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "( domestic version )"
},
{
"model": "global link manager",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "jp1/automatic job management system 3",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "linux)"
},
{
"model": "jp1/automatic operation",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "ucosminexus application server",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "none"
},
{
"model": "device manager",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "jp1/it desktop management",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "2 - smart device manager"
},
{
"model": "configuration manager",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "ucosminexus primary server",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "base"
},
{
"model": "ucosminexus service platform",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "tuning manager",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "jp1/operations analytics",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "cosminexus http server",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "jp1/snmp system observer",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "ucosminexus application server",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "-r"
},
{
"model": "ucosminexus service architect",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "tiered storage manager",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "automation director",
"scope": "eq",
"trust": 0.8,
"vendor": "hitachi",
"version": "( overseas edition )"
},
{
"model": "replication manager",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "ucosminexus developer",
"scope": null,
"trust": 0.8,
"vendor": "hitachi",
"version": null
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.1.0d"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.0.2k"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.1.0c"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.1.0e"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.1.0b"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.1.0a"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.0.2l"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.1.0"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.1.0f"
},
{
"model": "openssl",
"scope": "eq",
"trust": 0.6,
"vendor": "openssl",
"version": "1.0.2j"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-066"
},
{
"db": "NVD",
"id": "CVE-2017-3736"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.0.2m",
"versionStartIncluding": "1.0.2",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.1.0g",
"versionStartIncluding": "1.1.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2017-3736"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "OSS-Fuzz",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201711-066"
}
],
"trust": 0.6
},
"cve": "CVE-2017-3736",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "Single",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2017-3736",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 6.5,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2017-3736",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2017-3736",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201711-066",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2017-3736",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2017-3736"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-066"
},
{
"db": "NVD",
"id": "CVE-2017-3736"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen. Description:\n\nThis release adds the new Apache HTTP Server 2.4.29 packages that are part\nof the JBoss Core Services offering. \n\nThis release serves as a replacement for Red Hat JBoss Core Services\nApache HTTP Server 2.4.23, and includes bug fixes and enhancements. Refer\nto the Release Notes for information on the most significant bug fixes,\nenhancements and component upgrades included in this release. \n\nThis release upgrades OpenSSL to version 1.0.2.n\n\nSecurity Fix(es):\n\n* openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()\n(CVE-2016-2182)\n\n* openssl: Insufficient TLS session ticket HMAC length checks\n(CVE-2016-6302)\n\n* openssl: certificate message OOB reads (CVE-2016-6306)\n\n* openssl: Carry propagating bug in Montgomery multiplication\n(CVE-2016-7055)\n\n* openssl: Truncated packet could crash via OOB read (CVE-2017-3731)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64\n(CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* openssl: Read/write after SSL object in error state (CVE-2017-3737)\n\n* openssl: rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-6306\nand CVE-2016-7055. Solution:\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied. Bugs fixed (https://bugzilla.redhat.com/):\n\n1367340 - CVE-2016-2182 openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()\n1369855 - CVE-2016-6302 openssl: Insufficient TLS session ticket HMAC length checks\n1377594 - CVE-2016-6306 openssl: certificate message OOB reads\n1393929 - CVE-2016-7055 openssl: Carry propagating bug in Montgomery multiplication\n1416852 - CVE-2017-3731 openssl: Truncated packet could crash via OOB read\n1416856 - CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64\n1509169 - CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64\n1523504 - CVE-2017-3737 openssl: Read/write after SSL object in error state\n1523510 - CVE-2017-3738 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64\n\n6. JIRA issues fixed (https://issues.jboss.org/):\n\nJBCS-373 - Errata for httpd 2.4.29 GA RHEL 7\n\n7. ==========================================================================\nUbuntu Security Notice USN-3475-1\nNovember 06, 2017\n\nopenssl vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 17.10\n- Ubuntu 17.04\n- Ubuntu 16.04 LTS\n- Ubuntu 14.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in OpenSSL. \n\nSoftware Description:\n- openssl: Secure Socket Layer (SSL) cryptographic library and tools\n\nDetails:\n\nIt was discovered that OpenSSL incorrectly parsed the IPAddressFamily\nextension in X.509 certificates, resulting in an erroneous display of the\ncertificate in text format. While unlikely, a remote attacker could possibly use\nthis issue to recover private keys. This issue only applied to Ubuntu 16.04\nLTS, Ubuntu 16.10 and Ubuntu 17.04. (CVE-2017-3736)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 17.10:\n libssl1.0.0 1.0.2g-1ubuntu13.2\n\nUbuntu 17.04:\n libssl1.0.0 1.0.2g-1ubuntu11.3\n\nUbuntu 16.04 LTS:\n libssl1.0.0 1.0.2g-1ubuntu4.9\n\nUbuntu 14.04 LTS:\n libssl1.0.0 1.0.1f-1ubuntu2.23\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory GLSA 201712-03\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n https://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n Title: OpenSSL: Multiple vulnerabilities\n Date: December 14, 2017\n Bugs: #629290, #636264, #640172\n ID: 201712-03\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in OpenSSL, the worst of which\nmay lead to a Denial of Service condition. \n\nBackground\n==========\n\nOpenSSL is a robust, commercial-grade, and full-featured toolkit for\nthe Transport Layer Security (TLS) and Secure Sockets Layer (SSL)\nprotocols. \n\nAffected packages\n=================\n\n -------------------------------------------------------------------\n Package / Vulnerable / Unaffected\n -------------------------------------------------------------------\n 1 dev-libs/openssl \u003c 1.0.2n \u003e= 1.0.2n\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in OpenSSL. Please review\nthe referenced CVE identifiers for details. \n\nImpact\n======\n\nA remote attacker could cause a Denial of Service condition, recover a\nprivate key in unlikely circumstances, circumvent security restrictions\nto perform unauthorized actions, or gain access to sensitive\ninformation. \n\nWorkaround\n==========\n\nThere are no known workarounds at this time. \n\nResolution\n==========\n\nAll OpenSSL users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=dev-libs/openssl-1.0.2n\"\n\nReferences\n==========\n\n[ 1 ] CVE-2017-3735\n https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3735\n[ 2 ] CVE-2017-3736\n https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3736\n[ 3 ] CVE-2017-3737\n https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3737\n[ 4 ] CVE-2017-3738\n https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3738\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/201712-03\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2017 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n\n\n--IrEhWFjxIJsFtqH1v1HHQsLm3nLmhNeP4--\n\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n==================================================================== \nRed Hat Security Advisory\n\nSynopsis: Important: java-1.8.0-ibm security update\nAdvisory ID: RHSA-2018:2575-01\nProduct: Red Hat Enterprise Linux Supplementary\nAdvisory URL: https://access.redhat.com/errata/RHSA-2018:2575\nIssue date: 2018-08-28\nCVE Names: CVE-2016-0705 CVE-2017-3732 CVE-2017-3736\n CVE-2018-1517 CVE-2018-1656 CVE-2018-2940\n CVE-2018-2952 CVE-2018-2973 CVE-2018-12539\n====================================================================\n1. Summary:\n\nAn update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux\n6 Supplementary. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64\nRed Hat Enterprise Linux HPC Node Supplementary (v. 6) - x86_64\nRed Hat Enterprise Linux Server Supplementary (v. 6) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64\n\n3. Description:\n\nIBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM\nJava Software Development Kit. \n\nThis update upgrades IBM Java SE 8 to version 8 SR5-FP20. \n\nSecurity Fix(es):\n\n* IBM JDK: privilege escalation via insufficiently restricted access to\nAttach API (CVE-2018-12539)\n\n* openssl: BN_mod_exp may produce incorrect results on x86_64\n(CVE-2017-3732)\n\n* openssl: bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)\n\n* IBM JDK: DoS in the java.math component (CVE-2018-1517)\n\n* IBM JDK: path traversal flaw in the Diagnostic Tooling Framework\n(CVE-2018-1656)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and\n10.0.2 (Libraries) (CVE-2018-2940)\n\n* OpenJDK: insufficient index validation in PatternSyntaxException\ngetMessage() (Concurrency, 8199547) (CVE-2018-2952)\n\n* Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and\n10.0.2 (JSSE) (CVE-2018-2973)\n\n* OpenSSL: Double-free in DSA code (CVE-2016-0705)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, and other related information, refer to the CVE page(s) listed in\nthe References section. \n\nRed Hat would like to thank the OpenSSL project for reporting\nCVE-2016-0705. Upstream acknowledges Adam Langley (Google/BoringSSL) as the\noriginal reporter of CVE-2016-0705. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of IBM Java must be restarted for this update to take\neffect. \n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1310596 - CVE-2016-0705 OpenSSL: Double-free in DSA code\n1416856 - CVE-2017-3732 openssl: BN_mod_exp may produce incorrect results on x86_64\n1509169 - CVE-2017-3736 openssl: bn_sqrx8x_internal carry bug on x86_64\n1600925 - CVE-2018-2952 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)\n1602145 - CVE-2018-2973 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (JSSE)\n1602146 - CVE-2018-2940 Oracle JDK: unspecified vulnerability fixed in 6u201, 7u191, 8u181, and 10.0.2 (Libraries)\n1618767 - CVE-2018-12539 IBM JDK: privilege escalation via insufficiently restricted access to Attach API\n1618869 - CVE-2018-1656 IBM JDK: path traversal flaw in the Diagnostic Tooling Framework\n1618871 - CVE-2018-1517 IBM JDK: DoS in the java.math component\n\n6. Package List:\n\nRed Hat Enterprise Linux Desktop Supplementary (v. 6):\n\ni386:\njava-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.i686.rpm\n\nx86_64:\njava-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.x86_64.rpm\n\nRed Hat Enterprise Linux HPC Node Supplementary (v. 6):\n\nx86_64:\njava-1.8.0-ibm-1.8.0.5.20-1jpp.1.el6_10.x86_64.rpm\n\nRed Hat Enterprise Linux Server Supplementary (v. 6):\n\ni386:\njava-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.i686.rpm\n\nppc64:\njava-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.ppc64.rpm\n\ns390x:\njava-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.s390x.rpm\n\nx86_64:\njava-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation Supplementary (v. 6):\n\ni386:\njava-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.i686.rpm\n\nx86_64:\njava-1.8.0-ibm-jdbc-1.8.0.5.20-1jpp.1.el6_10.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security. Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2016-0705\nhttps://access.redhat.com/security/cve/CVE-2017-3732\nhttps://access.redhat.com/security/cve/CVE-2017-3736\nhttps://access.redhat.com/security/cve/CVE-2018-1517\nhttps://access.redhat.com/security/cve/CVE-2018-1656\nhttps://access.redhat.com/security/cve/CVE-2018-2940\nhttps://access.redhat.com/security/cve/CVE-2018-2952\nhttps://access.redhat.com/security/cve/CVE-2018-2973\nhttps://access.redhat.com/security/cve/CVE-2018-12539\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2018 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niQIVAwUBW4WgLdzjgjWX9erEAQixyw//d2pemlb2TNR2kW3WlrxY0KBjUBM+PS4i\nbQ8+SoNsct2XtVFq0oOfwAmYMn++pAY37yvvhUdefe5sAcUldDcJtLIgXbtISSXe\nV5EdrLvQbv/rSxikOfccFzNI8GwJTgGiLpq8n9exHcSsY5cZevzukgRr6b+yQbnj\nmcYEC3TB/CnulDac/Pt0VsS9AoFhwuX958/+EQdpMq1yOGqog6eM8U6x2btA4YSi\nmcVD2hom6GuYMKq0oWDPWPry5hJePvbPM6GZw8pYdRvA1eKjp24M3mkWkkIEFw6U\naZCW6YXJuwMMJ4IYbF1Aofm3ab+R1VZXmPvzMHXRhVcRyZLvBzo1fZaw7ISX1ibV\nFimDRrXLIJDudoS80DMVmbgQTL37U6pGAe6gV2JLtvtEZl02Sxq5PeRfuMME4qeP\nrT+xyz0zjyIqTpxhAzAQJ28ZCrWDvRycCT5ZLwaPfxZ0+4cY1l58TMfYpdwIKJSC\nM8HQccrNxQ8S/kSKexIT18mSQcMwOhDza6gV4hSiOQgI/xHW3sic78a7/74JnSBT\nDgZuicAq73IWdYu67B04UzsZNsySSW6vs3BeYdfN5BnmK40NxrH5d5LMRV4xKmN+\nHlkzX1CrDCBl9PtbQF0xpUGluvXCg1u2kzGHj4Dv7JP64bV1wXmLm5kwrPL/QZhv\n8IL8kIZinC8=eoiE\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. \nOpenSSL Security Advisory [07 Dec 2017]\n========================================\n\nRead/write after SSL object in error state (CVE-2017-3737)\n==========================================================\n\nSeverity: Moderate\n\nOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\"\nmechanism. The intent was that if a fatal error occurred during a handshake then\nOpenSSL would move into the error state and would immediately fail if you\nattempted to continue the handshake. This works as designed for the explicit\nhandshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()),\nhowever due to a bug it does not work correctly if SSL_read() or SSL_write() is\ncalled directly. In that scenario, if the handshake fails then a fatal error\nwill be returned in the initial function call. If SSL_read()/SSL_write() is\nsubsequently called by the application for the same SSL object then it will\nsucceed and the data is passed without being decrypted/encrypted directly from\nthe SSL/TLS record layer. \n\nIn order to exploit this issue an application bug would have to be present that\nresulted in a call to SSL_read()/SSL_write() being issued after having already\nreceived a fatal error. \n\nThis issue does not affect OpenSSL 1.1.0. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2n\n\nThis issue was reported to OpenSSL on 10th November 2017 by David Benjamin\n(Google). The fix was proposed by David Benjamin and implemented by Matt Caswell\nof the OpenSSL development team. \n\nrsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)\n=========================================================\n\nSeverity: Low\n\nThere is an overflow bug in the AVX2 Montgomery multiplication procedure\nused in exponentiation with 1024-bit moduli. \n\nNote: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732\nand CVE-2015-3193. \n\nDue to the low severity of this issue we are not issuing a new release of\nOpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it\nbecomes available. The fix is also available in commit e502cc86d in the OpenSSL\ngit repository. \n\nOpenSSL 1.0.2 users should upgrade to 1.0.2n\n\nThis issue was reported to OpenSSL on 22nd November 2017 by David Benjamin\n(Google). The issue was originally found via the OSS-Fuzz project. The fix was\ndeveloped by Andy Polyakov of the OpenSSL development team. \n\nNote\n====\n\nSupport for version 1.0.1 ended on 31st December 2016. Support for versions\n0.9.8 and 1.0.0 ended on 31st December 2015. Those versions are no longer\nreceiving security updates. \n\nReferences\n==========\n\nURL for this Security Advisory:\nhttps://www.openssl.org/news/secadv/20171207.txt\n\nNote: the online version of the advisory may be updated with additional details\nover time. \n\nFor details of OpenSSL severity classifications please see:\nhttps://www.openssl.org/policies/secpolicy.html\n. \nOpenSSL Security Advisory [27 Mar 2018]\n========================================\n\nConstructed ASN.1 types with a recursive definition could exceed the stack (CVE-2018-0739)\n==========================================================================================\n\nSeverity: Moderate\n\nConstructed ASN.1 types with a recursive definition (such as can be found in\nPKCS7) could eventually exceed the stack given malicious input with\nexcessive recursion. This could result in a Denial Of Service attack. There are\nno such structures used within SSL/TLS that come from untrusted sources so this\nis considered safe. \n\nIncorrect CRYPTO_memcmp on HP-UX PA-RISC (CVE-2018-0733)\n========================================================\n\nSeverity: Moderate\n\nBecause of an implementation bug the PA-RISC CRYPTO_memcmp function is\neffectively reduced to only comparing the least significant bit of each byte. \nThis allows an attacker to forge messages that would be considered as\nauthenticated in an amount of tries lower than that guaranteed by the security\nclaims of the scheme. The module can only be compiled by the HP-UX assembler, so\nthat only HP-UX PA-RISC targets are affected",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-3736"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"db": "VULMON",
"id": "CVE-2017-3736"
},
{
"db": "PACKETSTORM",
"id": "149403"
},
{
"db": "PACKETSTORM",
"id": "148524"
},
{
"db": "PACKETSTORM",
"id": "144899"
},
{
"db": "PACKETSTORM",
"id": "145423"
},
{
"db": "PACKETSTORM",
"id": "149130"
},
{
"db": "PACKETSTORM",
"id": "169631"
},
{
"db": "PACKETSTORM",
"id": "169655"
},
{
"db": "PACKETSTORM",
"id": "169626"
}
],
"trust": 2.43
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-3736",
"trust": 3.3
},
{
"db": "TENABLE",
"id": "TNS-2017-15",
"trust": 1.7
},
{
"db": "TENABLE",
"id": "TNS-2017-14",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1039727",
"trust": 1.7
},
{
"db": "BID",
"id": "101666",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010189",
"trust": 0.8
},
{
"db": "AUSCERT",
"id": "ESB-2019.1089",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.4645",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.4748",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.0258.3",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.0696",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.1613",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.1415",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.0733",
"trust": 0.6
},
{
"db": "MCAFEE",
"id": "SB10211",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201711-066",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2017-3736",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "149403",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "148524",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "144899",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "145423",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "149130",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "169631",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "169655",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "169626",
"trust": 0.1
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2017-3736"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"db": "PACKETSTORM",
"id": "149403"
},
{
"db": "PACKETSTORM",
"id": "148524"
},
{
"db": "PACKETSTORM",
"id": "144899"
},
{
"db": "PACKETSTORM",
"id": "145423"
},
{
"db": "PACKETSTORM",
"id": "149130"
},
{
"db": "PACKETSTORM",
"id": "169631"
},
{
"db": "PACKETSTORM",
"id": "169655"
},
{
"db": "PACKETSTORM",
"id": "169626"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-066"
},
{
"db": "NVD",
"id": "CVE-2017-3736"
}
]
},
"id": "VAR-201711-0923",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.22708334
},
"last_update_date": "2024-07-23T19:46:29.715000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "hitachi-sec-2018-106",
"trust": 0.8,
"url": "http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-106/index.html"
},
{
"title": "hitachi-sec-2018-124",
"trust": 0.8,
"url": "http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-124/index.html"
},
{
"title": "hitachi-sec-2019-105",
"trust": 0.8,
"url": "http://www.hitachi.co.jp/prod/comp/soft1/global/security/info/vuls/hitachi-sec-2019-105/index.html"
},
{
"title": "NTAP-20171107-0002",
"trust": 0.8,
"url": "https://security.netapp.com/advisory/ntap-20171107-0002/"
},
{
"title": "bn_sqrx8x_internal carry bug on x86_64 (CVE-2017-3736)",
"trust": 0.8,
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"title": "TNS-2017-14",
"trust": 0.8,
"url": "https://www.tenable.com/security/tns-2017-14"
},
{
"title": "hitachi-sec-2018-106",
"trust": 0.8,
"url": "http://www.hitachi.co.jp/prod/comp/soft1/security/info/vuls/hitachi-sec-2018-106/index.html"
},
{
"title": "hitachi-sec-2018-124",
"trust": 0.8,
"url": "http://www.hitachi.co.jp/prod/comp/soft1/security/info/vuls/hitachi-sec-2018-124/index.html"
},
{
"title": "hitachi-sec-2019-105",
"trust": 0.8,
"url": "http://www.hitachi.co.jp/prod/comp/soft1/security/info/vuls/hitachi-sec-2019-105/index.html"
},
{
"title": "OpenSSL Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=76120"
},
{
"title": "Red Hat: Moderate: openssl security and bug fix update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20180998 - security advisory"
},
{
"title": "Ubuntu Security Notice: openssl vulnerabilities",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-3475-1"
},
{
"title": "Debian Security Advisories: DSA-4017-1 openssl1.0 -- security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=c59b0b63bafaa6def9e5da50acf68ca8"
},
{
"title": "Red Hat: Important: java-1.8.0-ibm security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20182575 - security advisory"
},
{
"title": "Red Hat: Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 7 security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20182185 - security advisory"
},
{
"title": "Red Hat: Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 6 security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20182186 - security advisory"
},
{
"title": "Debian Security Advisories: DSA-4018-1 openssl -- security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=ac7ab332aa094dcdde4da9f7cb2a19f1"
},
{
"title": "Red Hat: Important: java-1.8.0-ibm security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20182568 - security advisory"
},
{
"title": "Red Hat: Moderate: java-1.8.0-ibm security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20182713 - security advisory"
},
{
"title": "Red Hat: Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20182187 - security advisory"
},
{
"title": "Red Hat: CVE-2017-3736",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2017-3736"
},
{
"title": "Arch Linux Issues: ",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=cve-2017-3736"
},
{
"title": "Amazon Linux AMI: ALAS-2018-1016",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2018-1016"
},
{
"title": "Symantec Security Advisories: SA157: OpenSSL Vulnerabilities 28-Aug-2017 and 2-Nov-2017",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=symantec_security_advisories\u0026qid=7d613a491eb4632d0bd09811cbeaee1e"
},
{
"title": "Arch Linux Advisories: [ASA-201712-9] openssl-1.0: multiple issues",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201712-9"
},
{
"title": "Arch Linux Advisories: [ASA-201711-14] openssl: multiple issues",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201711-14"
},
{
"title": "Arch Linux Advisories: [ASA-201711-15] lib32-openssl: multiple issues",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201711-15"
},
{
"title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Operations Center and Client Management Service (CVE-2016-0705, CVE-2017-3732, CVE-2017-3736, CVE-2018-1656, CVE-2018-12539)",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=3d9ab13c871ea2142681c7977b25c5ff"
},
{
"title": "Hitachi Security Advisories: Multiple Vulnerabilities in JP1",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=hitachi_security_advisories\u0026qid=hitachi-sec-2019-105"
},
{
"title": "Arch Linux Advisories: [ASA-201712-11] lib32-openssl-1.0: multiple issues",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201712-11"
},
{
"title": "IBM: IBM Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU \u2013 Jul 2018 \u2013 Includes Oracle Jul 2018 CPU affects DB2 Recovery Expert for Linux, Unix and Windows",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=af4ddb95056d65a4af347aec0f652f0e"
},
{
"title": "Tenable Security Advisories: [R1] Nessus 6.11.3 Fixes Multiple Third-party Vulnerabilities",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories\u0026qid=tns-2017-15"
},
{
"title": "Amazon Linux 2: ALAS2-2018-1004",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=alas2-2018-1004"
},
{
"title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cognos Planning",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=62ef85c9034c17315b7d0a712483c5ea"
},
{
"title": "Tenable Security Advisories: [R1] SecurityCenter 5.6.0.1 Fixes Multiple Third-party Vulnerabilities",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories\u0026qid=tns-2017-14"
},
{
"title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Reporting for Development Intelligence",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=03b0267d78cd8ac1bbb43afc737474f0"
},
{
"title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects IBM InfoSphere Information Server",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=63bbfc68418161b36080acd59a541d45"
},
{
"title": "IBM: IBM Security Bulletin: IBM Cognos Controller 2019Q2 Security Updater: Multiple vulnerabilities have been identified in IBM Cognos Controller",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=38227211accce022b0a3d9b56a974186"
},
{
"title": "Oracle: Oracle Critical Patch Update Advisory - July 2018",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories\u0026qid=5f8c525f1408011628af1792207b2099"
},
{
"title": "Oracle: Oracle Critical Patch Update Advisory - April 2018",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories\u0026qid=4019ca77f50c7a34e4d97833e6f3321e"
},
{
"title": "Oracle: Oracle Critical Patch Update Advisory - January 2019",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories\u0026qid=f655264a6935505d167bbf45f409a57b"
},
{
"title": "Oracle: Oracle Critical Patch Update Advisory - October 2018",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories\u0026qid=81c63752a6f26433af2128b2e8c02385"
},
{
"title": "Oracle Linux Bulletins: Oracle Linux Bulletin - April 2018",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins\u0026qid=ae57a14ec914f60b7203332a77613077"
},
{
"title": "IBM: IBM Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=f5bb2b180c7c77e5a02747a1f31830d9"
},
{
"title": "Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - April 2018",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins\u0026qid=72fe5ebf222112c8481815fd7cefc7af"
},
{
"title": "Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - January 2018",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins\u0026qid=525e4e31765e47b9e53b24e880af9d6e"
},
{
"title": "IBM: IBM Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple vulnerabilities",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=dd8c9d5928cc3b1ac8c35b4b24703e38"
},
{
"title": "Oracle: Oracle Critical Patch Update Advisory - January 2018",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=oracle_advisories\u0026qid=e2a7f287e9acc8c64ab3df71130bc64d"
},
{
"title": "IBM: Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM Netezza Analytics for NPS",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=c36fc403a4c2c6439b732d2fca738f58"
},
{
"title": "cp4s-car-schema",
"trust": 0.1,
"url": "https://github.com/ibm/cp4s-car-schema "
},
{
"title": "core-kit",
"trust": 0.1,
"url": "https://github.com/funtoo/core-kit "
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2017-3736"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-066"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"db": "NVD",
"id": "CVE-2017-3736"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://www.securityfocus.com/bid/101666"
},
{
"trust": 1.8,
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"trust": 1.8,
"url": "https://security.gentoo.org/glsa/201712-03"
},
{
"trust": 1.8,
"url": "https://access.redhat.com/errata/rhsa-2018:0998"
},
{
"trust": 1.8,
"url": "https://access.redhat.com/errata/rhsa-2018:2185"
},
{
"trust": 1.8,
"url": "https://access.redhat.com/errata/rhsa-2018:2575"
},
{
"trust": 1.8,
"url": "https://access.redhat.com/errata/rhsa-2018:2713"
},
{
"trust": 1.7,
"url": "http://www.securitytracker.com/id/1039727"
},
{
"trust": 1.7,
"url": "https://www.debian.org/security/2017/dsa-4018"
},
{
"trust": 1.7,
"url": "https://www.debian.org/security/2017/dsa-4017"
},
{
"trust": 1.7,
"url": "https://security.netapp.com/advisory/ntap-20171107-0002/"
},
{
"trust": 1.7,
"url": "https://www.tenable.com/security/tns-2017-14"
},
{
"trust": 1.7,
"url": "https://security.freebsd.org/advisories/freebsd-sa-17:11.openssl.asc"
},
{
"trust": 1.7,
"url": "https://www.tenable.com/security/tns-2017-15"
},
{
"trust": 1.7,
"url": "https://security.netapp.com/advisory/ntap-20180117-0002/"
},
{
"trust": 1.7,
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"trust": 1.7,
"url": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871"
},
{
"trust": 1.7,
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"trust": 1.7,
"url": "https://access.redhat.com/errata/rhsa-2018:2187"
},
{
"trust": 1.7,
"url": "https://access.redhat.com/errata/rhsa-2018:2186"
},
{
"trust": 1.7,
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"trust": 1.7,
"url": "https://access.redhat.com/errata/rhsa-2018:2568"
},
{
"trust": 1.7,
"url": "https://support.hpe.com/hpsc/doc/public/display?doclocale=en_us\u0026docid=emr_na-hpesbst03881en_us"
},
{
"trust": 1.7,
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"trust": 1.7,
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"trust": 1.7,
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"trust": 1.7,
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"trust": 1.6,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-3736"
},
{
"trust": 0.9,
"url": "https://access.redhat.com/security/cve/cve-2017-3736"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-3736"
},
{
"trust": 0.6,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-3732"
},
{
"trust": 0.6,
"url": "https://www-01.ibm.com/support/docview.wss?uid=ssg1s1012049"
},
{
"trust": 0.6,
"url": "https://www.symantec.com/security-center/network-protection-security-advisories/sa157"
},
{
"trust": 0.6,
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21984819"
},
{
"trust": 0.6,
"url": "https://www.oracle.com/technetwork/topics/security/linuxbulletinapr2018-4431087.html"
},
{
"trust": 0.6,
"url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=sb10211"
},
{
"trust": 0.6,
"url": "http://openssl.org/"
},
{
"trust": 0.6,
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169"
},
{
"trust": 0.6,
"url": "https://github.com/openssl/openssl/commit/668a709a8d7ea374ee72ad2d43ac72ec60a80eee"
},
{
"trust": 0.6,
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-201914246-1.html"
},
{
"trust": 0.6,
"url": "http://www.ibm.com/support/docview.wss?uid=ibm10715641"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.0696"
},
{
"trust": 0.6,
"url": "https://www-01.ibm.com/support/docview.wss?uid=ibm10882734"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/76710"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2019.4748/"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2019.4645/"
},
{
"trust": 0.6,
"url": "https://www.ibm.com/support/pages/node/1138588"
},
{
"trust": 0.6,
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-affect-ibm-netezza-analytics/"
},
{
"trust": 0.6,
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-affect-ibm-netezza-analytics-for-nps/"
},
{
"trust": 0.6,
"url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-jre-8-0-1-1-affect-ibm-netezza-platform-software-clients/"
},
{
"trust": 0.6,
"url": "http://www.ibm.com/support/docview.wss?uid=ibm10882292"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/80494"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/79678"
},
{
"trust": 0.6,
"url": "http://www.ibm.com/support/docview.wss?uid=ibm10734877"
},
{
"trust": 0.6,
"url": "http://www.ibm.com/support/docview.wss?uid=ibm10879093"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/78218"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/74714"
},
{
"trust": 0.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-3738"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/articles/11258"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/team/contact/"
},
{
"trust": 0.3,
"url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/cve/cve-2017-3732"
},
{
"trust": 0.3,
"url": "https://bugzilla.redhat.com/):"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/team/key/"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-3737"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-3735"
},
{
"trust": 0.3,
"url": "https://www.openssl.org/policies/secpolicy.html"
},
{
"trust": 0.3,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-3193"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-2940"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2018-2952"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2018-12539"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-0705"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2016-0705"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2018-2973"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2018-1656"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2018-2940"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/cve/cve-2018-1517"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-1517"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-2952"
},
{
"trust": 0.2,
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-1656"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-2973"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-12539"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-0701"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/200.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://usn.ubuntu.com/3475-1/"
},
{
"trust": 0.1,
"url": "https://tools.cisco.com/security/center/viewalert.x?alertid=57518"
},
{
"trust": 0.1,
"url": "https://issues.jboss.org/):"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-2182"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-3731"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-7055"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-6302"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2017-3731"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2017-3737"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-6306"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2017-3738"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2016-6306"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-2182"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-7055"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2016-6302"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu4.9"
},
{
"trust": 0.1,
"url": "https://www.ubuntu.com/usn/usn-3475-1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssl/1.0.1f-1ubuntu2.23"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu11.3"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu13.2"
},
{
"trust": 0.1,
"url": "http://creativecommons.org/licenses/by-sa/2.5"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/nvd.cfm?cvename=cve-2017-3737"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/nvd.cfm?cvename=cve-2017-3736"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/nvd.cfm?cvename=cve-2017-3738"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/nvd.cfm?cvename=cve-2017-3735"
},
{
"trust": 0.1,
"url": "https://security.gentoo.org/"
},
{
"trust": 0.1,
"url": "https://bugs.gentoo.org."
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"trust": 0.1,
"url": "https://www.openssl.org/news/secadv/20170828.txt,"
},
{
"trust": 0.1,
"url": "https://www.openssl.org/news/secadv/20171207.txt"
},
{
"trust": 0.1,
"url": "https://www.openssl.org/news/secadv/20180327.txt"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-0739"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-0733"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2017-3736"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"db": "PACKETSTORM",
"id": "149403"
},
{
"db": "PACKETSTORM",
"id": "148524"
},
{
"db": "PACKETSTORM",
"id": "144899"
},
{
"db": "PACKETSTORM",
"id": "145423"
},
{
"db": "PACKETSTORM",
"id": "149130"
},
{
"db": "PACKETSTORM",
"id": "169631"
},
{
"db": "PACKETSTORM",
"id": "169655"
},
{
"db": "PACKETSTORM",
"id": "169626"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-066"
},
{
"db": "NVD",
"id": "CVE-2017-3736"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULMON",
"id": "CVE-2017-3736"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"db": "PACKETSTORM",
"id": "149403"
},
{
"db": "PACKETSTORM",
"id": "148524"
},
{
"db": "PACKETSTORM",
"id": "144899"
},
{
"db": "PACKETSTORM",
"id": "145423"
},
{
"db": "PACKETSTORM",
"id": "149130"
},
{
"db": "PACKETSTORM",
"id": "169631"
},
{
"db": "PACKETSTORM",
"id": "169655"
},
{
"db": "PACKETSTORM",
"id": "169626"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-066"
},
{
"db": "NVD",
"id": "CVE-2017-3736"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-11-02T00:00:00",
"db": "VULMON",
"id": "CVE-2017-3736"
},
{
"date": "2017-12-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"date": "2018-09-18T02:18:55",
"db": "PACKETSTORM",
"id": "149403"
},
{
"date": "2018-07-12T21:48:49",
"db": "PACKETSTORM",
"id": "148524"
},
{
"date": "2017-11-06T22:24:00",
"db": "PACKETSTORM",
"id": "144899"
},
{
"date": "2017-12-15T14:15:17",
"db": "PACKETSTORM",
"id": "145423"
},
{
"date": "2018-08-29T00:28:49",
"db": "PACKETSTORM",
"id": "149130"
},
{
"date": "2017-11-02T12:12:12",
"db": "PACKETSTORM",
"id": "169631"
},
{
"date": "2017-12-07T12:12:12",
"db": "PACKETSTORM",
"id": "169655"
},
{
"date": "2018-03-27T12:12:12",
"db": "PACKETSTORM",
"id": "169626"
},
{
"date": "2017-11-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201711-066"
},
{
"date": "2017-11-02T17:29:00.243000",
"db": "NVD",
"id": "CVE-2017-3736"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-04-23T00:00:00",
"db": "VULMON",
"id": "CVE-2017-3736"
},
{
"date": "2019-08-01T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-010189"
},
{
"date": "2022-02-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201711-066"
},
{
"date": "2019-04-23T19:30:04.427000",
"db": "NVD",
"id": "CVE-2017-3736"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "148524"
},
{
"db": "PACKETSTORM",
"id": "144899"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-066"
}
],
"trust": 0.8
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "OpenSSL Vulnerability in",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010189"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201711-066"
}
],
"trust": 0.6
}
}
gsd-2017-3736
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2017-3736",
"description": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"id": "GSD-2017-3736",
"references": [
"https://www.suse.com/security/cve/CVE-2017-3736.html",
"https://www.debian.org/security/2017/dsa-4018",
"https://www.debian.org/security/2017/dsa-4017",
"https://access.redhat.com/errata/RHSA-2018:2713",
"https://access.redhat.com/errata/RHSA-2018:2575",
"https://access.redhat.com/errata/RHSA-2018:2568",
"https://access.redhat.com/errata/RHSA-2018:2187",
"https://access.redhat.com/errata/RHSA-2018:2186",
"https://access.redhat.com/errata/RHSA-2018:2185",
"https://access.redhat.com/errata/RHSA-2018:0998",
"https://ubuntu.com/security/CVE-2017-3736",
"https://advisories.mageia.org/CVE-2017-3736.html",
"https://security.archlinux.org/CVE-2017-3736",
"https://alas.aws.amazon.com/cve/html/CVE-2017-3736.html",
"https://linux.oracle.com/cve/CVE-2017-3736.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2017-3736"
],
"details": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"id": "GSD-2017-3736",
"modified": "2023-12-13T01:21:16.889607Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "openssl-security@openssl.org",
"DATE_PUBLIC": "2017-11-02T00:00:00",
"ID": "CVE-2017-3736",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "OpenSSL",
"version": {
"version_data": [
{
"version_value": "1.1.0 - 1.1.0f"
},
{
"version_value": "1.0.2 - 1.0.2l"
}
]
}
}
]
},
"vendor_name": "OpenSSL Software Foundation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "carry-propagating bug"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://security.netapp.com/advisory/ntap-20171107-0002/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20171107-0002/"
},
{
"name": "RHSA-2018:2185",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
},
{
"name": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871",
"refsource": "MISC",
"url": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871"
},
{
"name": "RHSA-2018:2186",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"name": "RHSA-2018:2713",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"refsource": "CONFIRM",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"name": "DSA-4018",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2017/dsa-4018"
},
{
"name": "GLSA-201712-03",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201712-03"
},
{
"name": "RHSA-2018:0998",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
},
{
"name": "RHSA-2018:2575",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"name": "https://www.tenable.com/security/tns-2017-15",
"refsource": "CONFIRM",
"url": "https://www.tenable.com/security/tns-2017-15"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "101666",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/101666"
},
{
"name": "RHSA-2018:2568",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"name": "https://www.openssl.org/news/secadv/20171102.txt",
"refsource": "CONFIRM",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"refsource": "CONFIRM",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"name": "DSA-4017",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2017/dsa-4017"
},
{
"name": "https://www.tenable.com/security/tns-2017-14",
"refsource": "CONFIRM",
"url": "https://www.tenable.com/security/tns-2017-14"
},
{
"name": "FreeBSD-SA-17:11",
"refsource": "FREEBSD",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"
},
{
"name": "1039727",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1039727"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us",
"refsource": "CONFIRM",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us"
},
{
"name": "RHSA-2018:2187",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180117-0002/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20180117-0002/"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"refsource": "MISC",
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"refsource": "MISC",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.0.2m",
"versionStartIncluding": "1.0.2",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.1.0g",
"versionStartIncluding": "1.1.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "openssl-security@openssl.org",
"ID": "CVE-2017-3736"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.openssl.org/news/secadv/20171102.txt",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Vendor Advisory"
],
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"name": "1039727",
"refsource": "SECTRACK",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1039727"
},
{
"name": "DSA-4018",
"refsource": "DEBIAN",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2017/dsa-4018"
},
{
"name": "DSA-4017",
"refsource": "DEBIAN",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2017/dsa-4017"
},
{
"name": "101666",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/101666"
},
{
"name": "https://security.netapp.com/advisory/ntap-20171107-0002/",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20171107-0002/"
},
{
"name": "https://www.tenable.com/security/tns-2017-14",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking",
"Third Party Advisory"
],
"url": "https://www.tenable.com/security/tns-2017-14"
},
{
"name": "FreeBSD-SA-17:11",
"refsource": "FREEBSD",
"tags": [
"Third Party Advisory"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"
},
{
"name": "https://www.tenable.com/security/tns-2017-15",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://www.tenable.com/security/tns-2017-15"
},
{
"name": "GLSA-201712-03",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201712-03"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180117-0002/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180117-0002/"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"name": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871"
},
{
"name": "RHSA-2018:0998",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"name": "RHSA-2018:2187",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
},
{
"name": "RHSA-2018:2186",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
},
{
"name": "RHSA-2018:2185",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"name": "RHSA-2018:2568",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"name": "RHSA-2018:2575",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"name": "RHSA-2018:2713",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us"
},
{
"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html",
"refsource": "CONFIRM",
"tags": [],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",
"refsource": "MISC",
"tags": [],
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"refsource": "MISC",
"tags": [],
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2019-04-23T19:30Z",
"publishedDate": "2017-11-02T17:29Z"
}
}
}
ghsa-72w7-9ghx-p5pg
Vulnerability from github
Published
2022-05-14 01:07
Modified
2022-05-14 01:07
Severity ?
Details
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.
{
"affected": [],
"aliases": [
"CVE-2017-3736"
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2017-11-02T17:29:00Z",
"severity": "MODERATE"
},
"details": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.",
"id": "GHSA-72w7-9ghx-p5pg",
"modified": "2022-05-14T01:07:11Z",
"published": "2022-05-14T01:07:11Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3736"
},
{
"type": "WEB",
"url": "https://github.com/openssl/openssl/commit/4443cf7aa0099e5ce615c18cee249fff77fb0871"
},
{
"type": "WEB",
"url": "https://www.tenable.com/security/tns-2017-15"
},
{
"type": "WEB",
"url": "https://www.tenable.com/security/tns-2017-14"
},
{
"type": "WEB",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
},
{
"type": "WEB",
"url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
},
{
"type": "WEB",
"url": "https://www.openssl.org/news/secadv/20171102.txt"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2017/dsa-4018"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2017/dsa-4017"
},
{
"type": "WEB",
"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbst03881en_us"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20180117-0002"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20171107-0002"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201712-03"
},
{
"type": "WEB",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2713"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2575"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2568"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2187"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2186"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:2185"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2018:0998"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
},
{
"type": "WEB",
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/101666"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1039727"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.