{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AMQ Broker 7.4.3 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "AMQ Broker is a high-performance messaging implementation based on ActiveMQ Artemis. It uses an asynchronous journal for fast message persistence, and supports multiple languages, protocols, and platforms. \n\nThis release of Red Hat AMQ Broker 7.4.3 serves as a replacement for Red Hat AMQ Broker 7.4.2, and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.\n\nSecurity Fix(es):\n\n* jetty: HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* jetty: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* jetty: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* jetty: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* jetty: HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* jetty: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* jetty: HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\n* netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers (CVE-2019-16869)\n\n* netty: HTTP request smuggling (CVE-2019-20444)\n\n* netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header (CVE-2019-20445)\n\n* netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling (CVE-2020-7238)\n\n* mqtt-client: activemq: Corrupt MQTT frame can cause broker shutdown (CVE-2019-0222)\n\n* jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions (CVE-2019-10241)\n\n* jetty: error path information disclosure (CVE-2019-10247)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:1445",
        "url": "https://access.redhat.com/errata/RHSA-2020:1445"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.broker\u0026version=7.4.3",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.broker\u0026version=7.4.3"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.4/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.4/"
      },
      {
        "category": "external",
        "summary": "1696012",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696012"
      },
      {
        "category": "external",
        "summary": "1705924",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924"
      },
      {
        "category": "external",
        "summary": "1705993",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "1758619",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
      },
      {
        "category": "external",
        "summary": "1796225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
      },
      {
        "category": "external",
        "summary": "1798509",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
      },
      {
        "category": "external",
        "summary": "1798524",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1445.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AMQ Broker 7.4.3 release and security update",
    "tracking": {
      "current_release_date": "2024-11-05T22:03:48+00:00",
      "generator": {
        "date": "2024-11-05T22:03:48+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2020:1445",
      "initial_release_date": "2020-04-14T13:04:37+00:00",
      "revision_history": [
        {
          "date": "2020-04-14T13:04:37+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-04-14T13:04:37+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T22:03:48+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AMQ 7.4.3",
                "product": {
                  "name": "Red Hat AMQ 7.4.3",
                  "product_id": "Red Hat AMQ 7.4.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_broker:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss AMQ"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-0222",
      "discovery_date": "2019-03-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1696012"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "activemq: Corrupt MQTT frame can cause broker shutdown",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0222"
        },
        {
          "category": "external",
          "summary": "RHBZ#1696012",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0222",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0222"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0222",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0222"
        }
      ],
      "release_date": "2019-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "activemq: Corrupt MQTT frame can cause broker shutdown"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-10241",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705924"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705924",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10241",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241"
        }
      ],
      "release_date": "2019-04-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions"
    },
    {
      "cve": "CVE-2019-10247",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: error path information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10247",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247"
        }
      ],
      "release_date": "2019-04-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "jetty: error path information disclosure"
    },
    {
      "cve": "CVE-2019-16869",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-09-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758619"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where whitespace before the colon in HTTP headers is mishandled. This flaw allows an attacker to cause HTTP request smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that this vulnerability does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758619",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869"
        }
      ],
      "release_date": "2019-09-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers"
    },
    {
      "cve": "CVE-2019-20444",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF (carriage return, line feed) without being followed by SP (space) or HTAB (horizontal tab), result in situations where headers can be misread. Data integrity is the highest threat with this vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not pose a substantial practical threat to ElasticSearch 6. We agree that these issues would be difficult to exploit on OpenShift Container Platform so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20444",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://github.com/elastic/elasticsearch/issues/49396",
          "url": "https://github.com/elastic/elasticsearch/issues/49396"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling"
    },
    {
      "cve": "CVE-2019-20445",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798509"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty before version 4.1.44, where it accepted multiple Content-Length headers and also accepted both Transfer-Encoding, as well as Content-Length headers where it should reject the message under such circumstances. In circumstances where Netty is used in the context of a server, it could result in a viable HTTP smuggling vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798509",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header"
    },
    {
      "cve": "CVE-2020-7238",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1796225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ 7.4.3"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "RHBZ#1796225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-7238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://netty.io/news/2019/12/18/4-1-44-Final.html",
          "url": "https://netty.io/news/2019/12/18/4-1-44-Final.html"
        }
      ],
      "release_date": "2020-01-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-04-14T13:04:37+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:1445"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ 7.4.3"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nginx114-nginx is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2775",
        "url": "https://access.redhat.com/errata/RHSA-2019:2775"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2775.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nginx114-nginx security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:24:31+00:00",
      "generator": {
        "date": "2024-11-05T21:24:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2775",
      "initial_release_date": "2019-09-17T15:16:26+00:00",
      "revision_history": [
        {
          "date": "2019-09-17T15:16:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-17T15:16:27+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:24:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                  "product_id": "7Server-RHSCL-3.3-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
                  "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
                "product": {
                  "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
                  "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
                  "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-image-filter@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-perl@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-http-xslt-filter@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-mail@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-mod-stream@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
                  "product_id": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx114-nginx-debuginfo@1.14.1-1.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        },
        "product_reference": "rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-17T15:16:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2775"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-17T15:16:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2775"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-17T15:16:26+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx114-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2775"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-debuginfo-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-image-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-perl-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-http-xslt-filter-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-mail-1:1.14.1-1.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx114-nginx-mod-stream-1:1.14.1-1.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Core Services Pack Apache Server 2.4.29 Service Pack 3 packages for RHEL 6, RHEL 7, Microsoft Windows and Oracle Solaris are now available.\n\nRed Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release adds the new Apache HTTP Server 2.4.29 Service Pack 3 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP2, and includes security and bug fixes. Refer to the Release Notes for information on the component upgrades included in this release.\n\nSecurity Fix(es):\n\n* mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\n* mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nBug Fix(es):\n\n* nghttp2: Rebase to 1.39.2\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2950",
        "url": "https://access.redhat.com/errata/RHSA-2019:2950"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.29",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.29"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/html/red_hat_jboss_core_services_apache_http_server_2.4.29_service_pack_3_release_notes/index",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.29/html/red_hat_jboss_core_services_apache_http_server_2.4.29_service_pack_3_release_notes/index"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "JBCS-828",
        "url": "https://issues.redhat.com/browse/JBCS-828"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2950.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP3 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:38+00:00",
      "generator": {
        "date": "2024-11-05T21:27:38+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2950",
      "initial_release_date": "2019-10-01T11:46:03+00:00",
      "revision_history": [
        {
          "date": "2019-10-01T11:46:03+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-01T11:46:03+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:38+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services 1",
                "product": {
                  "name": "Red Hat JBoss Core Services 1",
                  "product_id": "Red Hat JBoss Core Services 1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T11:46:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2950"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T11:46:03+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2950"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A minor version update (from 7.5 to 7.6) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.\n\n[2020-04-17 update: descriptions for mutiple components fixed for the same CVE added; also added golang CVE descriptions that were unintentionally ommitted from the original publication]",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of Red Hat Fuse 7.6.0 serves as a replacement for Red Hat Fuse 7.5, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* undertow: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* golang: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* undertow: HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* undertow: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* golang: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* undertow: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* undertow: HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* undertow: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* undertow: HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\n* infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods (CVE-2019-10174)\n\n* spring-security-core: mishandling of user passwords allows logging in with a password of NULL (CVE-2019-11272)\n\n* jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution (CVE-2019-12384)\n\n* jackson-databind: default typing mishandling leading to remote code execution (CVE-2019-14379)\n\n* xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response (CVE-2019-17570)\n\n* js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)\n\n* logback: Serialization vulnerability in SocketServer and ServerSocketReceiver (CVE-2017-5929)\n\n* js-jquery: XSS in responses from cross-origin ajax requests (CVE-2017-16012)\n\n* apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip (CVE-2018-11771)\n\n* spring-data-api: potential information disclosure through maliciously crafted example value in ExampleMatcher (CVE-2019-3802)\n\n* undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed (CVE-2019-3888)\n\n* shiro: Cookie padding oracle vulnerability with default configuration (CVE-2019-12422)\n\n* jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message. (CVE-2019-12814)\n\n* jackson-databind: Polymorphic typing issue related to logback/JNDI (CVE-2019-14439)\n\n* springframework: DoS Attack via Range Requests (CVE-2018-15756)\n\n* c3p0: loading XML configuration leads to denial of service (CVE-2019-5427)\n\n* undertow: Information leak in requests for directories without trailing slashes (CVE-2019-10184)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:0983",
        "url": "https://access.redhat.com/errata/RHSA-2020:0983"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.fuse\u0026version=7.6.0",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.fuse\u0026version=7.6.0"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/"
      },
      {
        "category": "external",
        "summary": "1399546",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1399546"
      },
      {
        "category": "external",
        "summary": "1432858",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1432858"
      },
      {
        "category": "external",
        "summary": "1591854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591854"
      },
      {
        "category": "external",
        "summary": "1618573",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618573"
      },
      {
        "category": "external",
        "summary": "1643043",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1643043"
      },
      {
        "category": "external",
        "summary": "1693777",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1693777"
      },
      {
        "category": "external",
        "summary": "1703469",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703469"
      },
      {
        "category": "external",
        "summary": "1709860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1709860"
      },
      {
        "category": "external",
        "summary": "1713068",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713068"
      },
      {
        "category": "external",
        "summary": "1725795",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725795"
      },
      {
        "category": "external",
        "summary": "1725807",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725807"
      },
      {
        "category": "external",
        "summary": "1728993",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728993"
      },
      {
        "category": "external",
        "summary": "1730316",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730316"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1737517",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737517"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "1752962",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752962"
      },
      {
        "category": "external",
        "summary": "1774726",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774726"
      },
      {
        "category": "external",
        "summary": "1775193",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775193"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0983.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Fuse 7.6.0 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:56:36+00:00",
      "generator": {
        "date": "2024-11-05T21:56:36+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2020:0983",
      "initial_release_date": "2020-03-26T15:46:59+00:00",
      "revision_history": [
        {
          "date": "2020-03-26T15:46:59+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-04-20T07:19:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:56:36+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Fuse 7.6.0",
                "product": {
                  "name": "Red Hat Fuse 7.6.0",
                  "product_id": "Red Hat Fuse 7.6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_fuse:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Fuse"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-9251",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2016-11-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1399546"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jquery: Cross-site scripting via cross-domain ajax requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-9251"
        },
        {
          "category": "external",
          "summary": "RHBZ#1399546",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1399546"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-9251",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-9251"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-9251",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-9251"
        }
      ],
      "release_date": "2015-06-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jquery: Cross-site scripting via cross-domain ajax requests"
    },
    {
      "cve": "CVE-2017-5929",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2017-03-10T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1432858"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that logback is vulnerable to a deserialization issue. Logback can be configured to allow remote logging through SocketServer/ServerSocketReceiver interfaces that can accept untrusted serialized data. Authenticated attackers on the adjacent network can leverage this vulnerability to execute arbitrary code through deserialization of custom gadget chains.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "logback: Serialization vulnerability in SocketServer and ServerSocketReceiver",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5929"
        },
        {
          "category": "external",
          "summary": "RHBZ#1432858",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1432858"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5929",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5929"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5929",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5929"
        }
      ],
      "release_date": "2017-02-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "logback: Serialization vulnerability in SocketServer and ServerSocketReceiver"
    },
    {
      "cve": "CVE-2017-16012",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2018-06-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1591854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "No description is available for this CVE.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "js-jquery: XSS in responses from cross-origin ajax requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-16012"
        },
        {
          "category": "external",
          "summary": "RHBZ#1591854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-16012",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-16012"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-16012",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16012"
        }
      ],
      "release_date": "2017-03-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "js-jquery: XSS in responses from cross-origin ajax requests"
    },
    {
      "cve": "CVE-2018-11771",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618573"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17\u0027s ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress\u0027 zip package.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-11771"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618573",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618573"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-11771",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-11771"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-11771",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11771"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread.html/b8da751fc0ca949534cdf2744111da6bb0349d2798fac94b0a50f330@%3Cannounce.apache.org%3E",
          "url": "https://lists.apache.org/thread.html/b8da751fc0ca949534cdf2744111da6bb0349d2798fac94b0a50f330@%3Cannounce.apache.org%3E"
        }
      ],
      "release_date": "2018-08-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip"
    },
    {
      "cve": "CVE-2018-12536",
      "cwe": {
        "id": "CWE-209",
        "name": "Generation of Error Message Containing Sensitive Information"
      },
      "discovery_date": "2018-06-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1597418"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn\u0027t match a dynamic url-pattern, and is eventually handled by the DefaultServlet\u0027s static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: full server path revealed when using the default Error Handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12536"
        },
        {
          "category": "external",
          "summary": "RHBZ#1597418",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1597418"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12536",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12536"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12536",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12536"
        }
      ],
      "release_date": "2018-06-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "Information disclosure occurs when java.nio.file.InvalidPathException occurs and is handled by the default Jetty error handler. To protect against this, a custom error handler can be configured for that particular error or for a larger set of errors according to the documentation link below. Red Hat Product Security advises that production deployments on Jetty use custom error handlers to limit the information disclosed and to ensure effective logging of error conditions.\n\nhttp://www.eclipse.org/jetty/documentation/current/custom-error-pages.html",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "jetty: full server path revealed when using the default Error Handling"
    },
    {
      "cve": "CVE-2018-15756",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2018-10-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1643043"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controller returns an org.springframework.core.io.Resource. A malicious user (or attacker) can add a range header with a high number of ranges, or with wide ranges that overlap, or both, for a denial of service attack. This vulnerability affects applications that depend on either spring-webmvc or spring-webflux. Such applications must also have a registration for serving static resources (e.g. JS, CSS, images, and others), or have an annotated controller that returns an org.springframework.core.io.Resource. Spring Boot applications that depend on spring-boot-starter-web or spring-boot-starter-webflux are ready to serve static resources out of the box and are therefore vulnerable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "springframework: DoS Attack via Range Requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package rhvm-dependencies does not include the vulnerable spring-webmvc component.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-15756"
        },
        {
          "category": "external",
          "summary": "RHBZ#1643043",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1643043"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-15756",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-15756"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-15756",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-15756"
        },
        {
          "category": "external",
          "summary": "https://pivotal.io/security/cve-2018-15756",
          "url": "https://pivotal.io/security/cve-2018-15756"
        }
      ],
      "release_date": "2018-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "springframework: DoS Attack via Range Requests"
    },
    {
      "cve": "CVE-2019-3802",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-06-03T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1730316"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "spring-data-api: potential information disclosure through maliciously crafted example value in ExampleMatcher",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-3802"
        },
        {
          "category": "external",
          "summary": "RHBZ#1730316",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730316"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-3802",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-3802"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-3802",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3802"
        },
        {
          "category": "external",
          "summary": "https://pivotal.io/security/cve-2019-3802",
          "url": "https://pivotal.io/security/cve-2019-3802"
        }
      ],
      "release_date": "2019-07-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "spring-data-api: potential information disclosure through maliciously crafted example value in ExampleMatcher"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Carter Kozak"
          ]
        }
      ],
      "cve": "CVE-2019-3888",
      "cwe": {
        "id": "CWE-532",
        "name": "Insertion of Sensitive Information into Log File"
      },
      "discovery_date": "2019-03-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1693777"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-3888"
        },
        {
          "category": "external",
          "summary": "RHBZ#1693777",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1693777"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-3888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-3888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-3888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-3888"
        }
      ],
      "release_date": "2019-06-10T15:13:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed"
    },
    {
      "cve": "CVE-2019-5427",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2019-04-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1709860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "c3p0 version \u003c 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "c3p0: loading XML configuration leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Satellite 6 is not vulnerable to this issue, because the candlepin component who uses the c3p0 jar never passes a XML configuration file to c3p0, even though it includes a vulnerable version of the latter. Since this issue requires a XML files to be loaded by c3p0, an exploitation path doesn\u0027t exist.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5427"
        },
        {
          "category": "external",
          "summary": "RHBZ#1709860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1709860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5427",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5427"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5427",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5427"
        }
      ],
      "release_date": "2019-04-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "c3p0: loading XML configuration leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-10174",
      "cwe": {
        "id": "CWE-470",
        "name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
      },
      "discovery_date": "2018-10-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1703469"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan\u0027s privileges. The attacker can use reflection to introduce new, malicious behavior into the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform\u0027s OpenDaylight contains the vulnerable library. This library is a requirement of other dependencies (Karaf and Hibernate). Under supported deployments, the vulnerable functionality is not utilized. Based on this, no OpenDaylight versions will not be fixed.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10174"
        },
        {
          "category": "external",
          "summary": "RHBZ#1703469",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1703469"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10174",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10174"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10174",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10174"
        }
      ],
      "release_date": "2019-11-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "There is no known mitigation for this issue.",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Christian Schl\u00fcter"
          ],
          "organization": "Viada"
        }
      ],
      "cve": "CVE-2019-10184",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2019-03-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1713068"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: Information leak in requests for directories without trailing slashes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10184"
        },
        {
          "category": "external",
          "summary": "RHBZ#1713068",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713068"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10184",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10184"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10184",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10184"
        }
      ],
      "release_date": "2019-07-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "undertow: Information leak in requests for directories without trailing slashes"
    },
    {
      "cve": "CVE-2019-10241",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705924"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705924",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10241",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241"
        }
      ],
      "release_date": "2019-04-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions"
    },
    {
      "cve": "CVE-2019-10247",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: error path information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10247",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247"
        }
      ],
      "release_date": "2019-04-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "jetty: error path information disclosure"
    },
    {
      "cve": "CVE-2019-11272",
      "cwe": {
        "id": "CWE-305",
        "name": "Authentication Bypass by Primary Weakness"
      },
      "discovery_date": "2019-06-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1728993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Spring Security in several versions, in the use of plain text passwords using the PlaintextPasswordEncoder. If an application is using an affected version of Spring Security with the PlaintextPasswordEncoder and a user has a null encoded password, an attacker can use this flaw to authenticate using a password of \"null.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "spring-security-core: mishandling of user passwords allows logging in with a password of NULL",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform\u0027s OpenDaylight versions 9 and 10 contain the vulnerable code. However, these OpenDaylight versions were released as technical preview with limited support and will therefore not be updated. Other OpenDaylight versions do not contain the vulnerable library.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-11272"
        },
        {
          "category": "external",
          "summary": "RHBZ#1728993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11272",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-11272"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11272",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11272"
        },
        {
          "category": "external",
          "summary": "https://pivotal.io/security/cve-2019-11272",
          "url": "https://pivotal.io/security/cve-2019-11272"
        }
      ],
      "release_date": "2019-07-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "spring-security-core: mishandling of user passwords allows logging in with a password of NULL"
    },
    {
      "cve": "CVE-2019-12384",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2019-06-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1725807"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in FasterXML jackson-databind in versions prior to 2.9.9. The vulnerability would permit polymorphic deserialization of malicious objects using the logback-core gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. Depending on the classpath content, remote code execution may be possible.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack\u0027s OpenDaylight does not use logback in any supported configuration. Therefore, the prerequisites for this vulnerability are not present and OpenDaylight is not affected.\n\nThis vulnerability relies on logback-core (ch.qos.logback.core) being present in the application\u0027s ClassPath. Logback-core is not packaged as an RPM for Red Hat Enterprise Linux or Red Hat Software Collections. Applications using jackson-databind that do not also use logback-core are not impacted by this vulnerability.\n\nThis issue affects the versions of jackson-databind bundled with candlepin as shipped with Red Hat Satellite 6.x. However the affected code is NOT used at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12384"
        },
        {
          "category": "external",
          "summary": "RHBZ#1725807",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725807"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12384",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12384"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12384",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12384"
        }
      ],
      "release_date": "2019-06-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution"
    },
    {
      "cve": "CVE-2019-12422",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2019-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1774726"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache Shiro before 1.4.2, when using the default \"remember me\" configuration, cookies could be susceptible to a padding attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "shiro: Cookie padding oracle vulnerability with default configuration",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12422"
        },
        {
          "category": "external",
          "summary": "RHBZ#1774726",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774726"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12422",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12422"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12422",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12422"
        }
      ],
      "release_date": "2019-11-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "shiro: Cookie padding oracle vulnerability with default configuration"
    },
    {
      "cve": "CVE-2019-12814",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-06-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1725795"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A new polymorphic typing flaw was discovered in FasterXML jackson-databind, versions 2.x through 2.9.9. With default typing enabled, an attacker can send a specifically crafted JSON message to the server that allows them to read arbitrary local files.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "* Red Hat Satellite 6 does not include the jdom or jdom2 packages, thus it is not affected by this vulnerability. \n* Red Hat OpenStack\u0027s OpenDaylight does not include the jdom or jdom2 packages, thus it is not affected by this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-12814"
        },
        {
          "category": "external",
          "summary": "RHBZ#1725795",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1725795"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12814",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-12814"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12814",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12814"
        }
      ],
      "release_date": "2019-06-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "This vulnerability relies on jdom (org.jdom) or jdom2 (org.jdom2) being present in the application\u0027s ClassPath.  Applications using jackson-databind that do not also use jdom or jdom2 are not impacted by this vulnerability.",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message."
    },
    {
      "cve": "CVE-2019-14379",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2019-07-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1737517"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the ehcache and logback JNDI gadgets when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: default typing mishandling leading to remote code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nSimilarly, Satellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14379"
        },
        {
          "category": "external",
          "summary": "RHBZ#1737517",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737517"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14379",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14379"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14379",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14379"
        }
      ],
      "release_date": "2019-07-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: default typing mishandling leading to remote code execution"
    },
    {
      "cve": "CVE-2019-14439",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-07-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1752962"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jackson-databind: Polymorphic typing issue related to logback/JNDI",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenDaylight provided as part of Red Hat OpenStack does not utilize logback when used in a supported configuration. Therefore, the prerequisites for this vulnerability are not present and OpenDaylight is not affected.\n\nSatellite 6 does not enable polymorphic unmarshmalling, which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-14439"
        },
        {
          "category": "external",
          "summary": "RHBZ#1752962",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752962"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14439",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-14439"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14439",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14439"
        }
      ],
      "release_date": "2019-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jackson-databind: Polymorphic typing issue related to logback/JNDI"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Guillaume Teissier"
          ],
          "organization": "Orange"
        }
      ],
      "cve": "CVE-2019-17570",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "discovery_date": "2019-11-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1775193"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was discovered where the XMLRPC client implementation in Apache XMLRPC, performed deserialization of the server-side exception serialized in the faultCause attribute of XMLRPC error response messages. A malicious or compromised XMLRPC server could possibly use this flaw to execute arbitrary code with the privileges of an application using the Apache XMLRPC client library.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 7 provides vulnerable version of xmlrpc via the Optional repository.  As the Optional repository is not supported, this issue is not planned to be addressed there.\n\nRed Hat Virtualization Manager uses xmlrpc only for internal communication with the scheduler.  Since this is a component of the Manager itself, it is not subject to attacker influence and does not represent an attack surface.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Fuse 7.6.0"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-17570"
        },
        {
          "category": "external",
          "summary": "RHBZ#1775193",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775193"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17570",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-17570"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17570",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17570"
        },
        {
          "category": "external",
          "summary": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-x2r6-4m45-m4jp",
          "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-x2r6-4m45-m4jp"
        }
      ],
      "release_date": "2020-01-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-26T15:46:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nInstallation instructions are available from the Fuse 7.6.0 product documentation page:\nhttps://access.redhat.com/documentation/en-us/red_hat_fuse/7.6/",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0983"
        },
        {
          "category": "workaround",
          "details": "There is no known mitigation other than restricting applications using the Apache XMLRPC client library from sending requests to untrusted XMLRPC servers.",
          "product_ids": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat Fuse 7.6.0"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nginx112-nginx is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2746",
        "url": "https://access.redhat.com/errata/RHSA-2019:2746"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2746.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nginx112-nginx security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:24:05+00:00",
      "generator": {
        "date": "2024-11-05T21:24:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2746",
      "initial_release_date": "2019-09-13T08:46:52+00:00",
      "revision_history": [
        {
          "date": "2019-09-13T08:46:52+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-13T08:46:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:24:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                  "product_id": "7Server-RHSCL-3.3-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
                "product": {
                  "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
                  "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
                "product": {
                  "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
                  "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
                "product": {
                  "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
                  "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-image-filter@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-perl@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-http-xslt-filter@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-mail@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-mod-stream@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
                  "product_id": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx112-nginx-debuginfo@1.12.1-3.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        },
        "product_reference": "rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:46:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2746"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:46:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2746"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
          "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:46:52+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx112-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2746"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Server-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-debuginfo-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-image-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-perl-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-http-xslt-filter-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-mail-1:1.12.1-3.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.aarch64",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.s390x",
            "7Workstation-RHSCL-3.3:rh-nginx112-nginx-mod-stream-1:1.12.1-3.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for JBoss Core Services on RHEL 6 and RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.29 Service Pack 3 serves as an update to Red Hat JBoss Core Services Apache HTTP Server 2.4.29, and includes bug fixes for CVEs which are linked in the References section.\n\nSecurity Fix(es):\n\n* mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\n* mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nBug Fix(es):\n\n* nghttp2: Rebase to 1.39.2\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2946",
        "url": "https://access.redhat.com/errata/RHSA-2019:2946"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "JBCS-826",
        "url": "https://issues.redhat.com/browse/JBCS-826"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2946.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP3 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:31+00:00",
      "generator": {
        "date": "2024-11-05T21:27:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2946",
      "initial_release_date": "2019-10-01T13:40:45+00:00",
      "revision_history": [
        {
          "date": "2019-10-01T13:40:45+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-01T13:40:45+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 6 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 6 Server",
                  "product_id": "6Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                  "product_id": "7Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-41.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-41.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-41.jbcs.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-41.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-41.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-41.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.29-41.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.29-41.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.29-41.jbcs.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-1.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.29-41.jbcs.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.29-41.jbcs.el6?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.29-41.jbcs.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T13:40:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2946"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T13:40:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2946"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T13:40:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2946"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T13:40:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2946"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el6.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.29-41.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.29-41.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-1.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated Quay packages that fix several bugs and add various enhancements are now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Quay 3.1.1 errata release, including:\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Fixed repository mirror credentials properly escaped to allow special characters\n* Fixed repository mirror UI cancel button enabled\n* Fixed repository mirror UI change next sync date",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2966",
        "url": "https://access.redhat.com/errata/RHSA-2019:2966"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1750473",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1750473"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2966.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Quay v3.1.1 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:56+00:00",
      "generator": {
        "date": "2024-11-05T21:27:56+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2966",
      "initial_release_date": "2019-10-03T18:57:22+00:00",
      "revision_history": [
        {
          "date": "2019-10-03T18:57:22+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-03T18:57:22+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:56+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Quay v3",
                "product": {
                  "name": "Quay v3",
                  "product_id": "7Server-RH7-Quay-3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:quay:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Quay"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64",
                "product": {
                  "name": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64",
                  "product_id": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821?arch=amd64\u0026repository_url=registry.redhat.io/quay3/clair-jwt\u0026tag=v2.0.9-7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64 as a component of Quay v3",
          "product_id": "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        },
        "product_reference": "quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64",
        "relates_to_product_reference": "7Server-RH7-Quay-3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-03T18:57:22+00:00",
          "details": "Please download the release images via:\n\nquay.io/redhat/quay:v3.1.1\nquay.io/redhat/clair-jwt:v3.1.1\nquay.io/redhat/quay-builder:v3.1.1",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2966"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-RH7-Quay-3:quay3/clair-jwt@sha256:57bfdaaa1d1cf6683474b7f032215b7af109e35e0a83aa6beb0a79b7ac565821_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: rh-nodejs8-nodejs (8.16.1).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2955",
        "url": "https://access.redhat.com/errata/RHSA-2019:2955"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2955.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nodejs8-nodejs security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:44+00:00",
      "generator": {
        "date": "2024-11-05T21:27:44+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2955",
      "initial_release_date": "2019-10-02T14:29:13+00:00",
      "revision_history": [
        {
          "date": "2019-10-02T14:29:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-02T14:29:13+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:44+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.ppc64le",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
                  "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
                  "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.s390x",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
                  "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
                  "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.aarch64",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
                  "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
                  "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.src",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.src",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-0:3.0-5.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-0:3.0-5.el7.x86_64",
                  "product_id": "rh-nodejs8-0:3.0-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8@3.0-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
                  "product_id": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-runtime@3.0-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
                  "product_id": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-scldevel@3.0-5.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
                  "product_id": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs@8.16.1-2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
                  "product_id": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-devel@8.16.1-2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
                  "product_id": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-npm@6.4.1-8.16.1.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
                "product": {
                  "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
                  "product_id": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-debuginfo@8.16.1-2.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
                "product": {
                  "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
                  "product_id": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs8-nodejs-docs@8.16.1-2.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch"
        },
        "product_reference": "rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        },
        "product_reference": "rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-02T14:29:13+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2955"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-debuginfo-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-devel-0:8.16.1-2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-nodejs-docs-0:8.16.1-2.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-npm-0:6.4.1-8.16.1.2.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-runtime-0:3.0-5.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs8-scldevel-0:3.0-5.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys (CVE-2018-0737) * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734) * mod_auth_digest: access control bypass due to race condition (CVE-2019-0217) * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * mod_session_cookie does not respect expiry time (CVE-2018-17199) * mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) * mod_http2: possible crash on late upgrade (CVE-2019-0197) * mod_http2: read-after-free on a string compare (CVE-2019-0196) * nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511) * nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513) * mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516) * mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3932",
        "url": "https://access.redhat.com/errata/RHSA-2019:3932"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1568253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
      },
      {
        "category": "external",
        "summary": "1644364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
      },
      {
        "category": "external",
        "summary": "1645695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
      },
      {
        "category": "external",
        "summary": "1668493",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
      },
      {
        "category": "external",
        "summary": "1668497",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
      },
      {
        "category": "external",
        "summary": "1695020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
      },
      {
        "category": "external",
        "summary": "1695030",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
      },
      {
        "category": "external",
        "summary": "1695042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "JBCS-798",
        "url": "https://issues.redhat.com/browse/JBCS-798"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3932.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6",
    "tracking": {
      "current_release_date": "2024-11-05T21:37:07+00:00",
      "generator": {
        "date": "2024-11-05T21:37:07+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:3932",
      "initial_release_date": "2019-11-20T16:22:09+00:00",
      "revision_history": [
        {
          "date": "2019-11-20T16:22:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-01-06T13:05:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:37:07+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 6 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 6 Server",
                  "product_id": "6Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-20.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-20.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-63.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-63.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1-25.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-48.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-7.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-7.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-4.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-4.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-14.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-14.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-14.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-33.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-33.jbcs.el6?arch=i686\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-33.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.12-9.Final_redhat_2.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.46-22.redhat_1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.46-22.redhat_1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.46-22.redhat_1.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-16.GA.jbcs.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-20.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-20.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-63.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-63.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1-25.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-48.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-7.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-7.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-4.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-4.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-14.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-14.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-14.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-33.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-33.jbcs.el6?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-33.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.12-9.Final_redhat_2.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.46-22.redhat_1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.46-22.redhat_1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.46-22.redhat_1.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-16.GA.jbcs.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el6?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.46-22.redhat_1.jbcs.el6?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-33.jbcs.el6?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686"
        },
        "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
        "relates_to_product_reference": "6Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64 as a component of Red Hat JBoss Core Services on RHEL 6 Server",
          "product_id": "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64",
        "relates_to_product_reference": "6Server-JBCS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0734",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-10-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1644364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: timing side channel attack in the DSA signature algorithm",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "RHBZ#1644364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0734",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734"
        }
      ],
      "release_date": "2018-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: timing side channel attack in the DSA signature algorithm"
    },
    {
      "cve": "CVE-2018-0737",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-04-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1568253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1568253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2018/04/16/3",
          "url": "http://www.openwall.com/lists/oss-security/2018/04/16/3"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20180416.txt",
          "url": "https://www.openssl.org/news/secadv/20180416.txt"
        }
      ],
      "release_date": "2018-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Alejandro Cabrera Aldaya"
          ],
          "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba"
        },
        {
          "names": [
            "Billy Bob Brumley",
            "Cesar Pereida Garcia",
            "Sohaib ul Hassan"
          ]
        },
        {
          "names": [
            "Nicola Tuveri"
          ],
          "organization": "Tampere University of Technology; Finland"
        }
      ],
      "cve": "CVE-2018-5407",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-11-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1645695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1645695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://github.com/bbbrumley/portsmash",
          "url": "https://github.com/bbbrumley/portsmash"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20181112.txt",
          "url": "https://www.openssl.org/news/secadv/20181112.txt"
        }
      ],
      "release_date": "2018-10-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue.  Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)"
    },
    {
      "cve": "CVE-2018-17189",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668497"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: DoS via slow, unneeded request bodies",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668497",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17189",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: DoS via slow, unneeded request bodies"
    },
    {
      "cve": "CVE-2018-17199",
      "cwe": {
        "id": "CWE-613",
        "name": "Insufficient Session Expiration"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668493"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_session_cookie does not respect expiry time",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668493",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_session_cookie does not respect expiry time"
    },
    {
      "cve": "CVE-2019-0196",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: read-after-free on a string compare",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: read-after-free on a string compare"
    },
    {
      "cve": "CVE-2019-0197",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695042"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: possible crash on late upgrade",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695042",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-02-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: possible crash on late upgrade"
    },
    {
      "cve": "CVE-2019-0217",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition was found in mod_auth_digest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_auth_digest: access control bypass due to race condition",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Based on the the fact that digest authentication is rarely used in modern day web applications and httpd package shipped with Red Hat products do not ship threaded MPM configuration by default, this flaw has been rated as having Moderate level security impact. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0217",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects a threaded server configuration, so using the prefork MPM is an effective mitigation.  In versions of httpd package shipped with Red Hat Enterprise Linux 7, the prefork MPM is the default configuration.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_auth_digest: access control bypass due to race condition"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
          "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
          "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:22:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3932"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el6.noarch",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.src",
            "6Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el6.x86_64",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.i686",
            "6Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the nodejs:10 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: nodejs (10.16.3).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2925",
        "url": "https://access.redhat.com/errata/RHSA-2019:2925"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2925.json"
      }
    ],
    "title": "Red Hat Security Advisory: nodejs:10 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:08+00:00",
      "generator": {
        "date": "2024-11-05T21:27:08+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2925",
      "initial_release_date": "2019-09-30T15:15:54+00:00",
      "revision_history": [
        {
          "date": "2019-09-30T15:15:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-30T15:15:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:08+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.0.0.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs:10:8000020190911085529:f8e95b4e",
                "product": {
                  "name": "nodejs:10:8000020190911085529:f8e95b4e",
                  "product_id": "nodejs:10:8000020190911085529:f8e95b4e",
                  "product_identification_helper": {
                    "purl": "pkg:rpmmod/redhat/nodejs@10:8000020190911085529:f8e95b4e"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
                "product": {
                  "name": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
                  "product_id": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-docs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
                "product": {
                  "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
                  "product_id": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-nodemon@1.18.3-1.module%2Bel8%2B2632%2B6c5111ed?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
                "product": {
                  "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
                  "product_id": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-packaging@17-3.module%2Bel8%2B2873%2Baa7dfd9a?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
                "product": {
                  "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
                  "product_id": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-nodemon@1.18.3-1.module%2Bel8%2B2632%2B6c5111ed?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
                "product": {
                  "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
                  "product_id": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-packaging@17-3.module%2Bel8%2B2873%2Baa7dfd9a?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64",
                "product": {
                  "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
                "product": {
                  "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
                  "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
                "product": {
                  "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debuginfo@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-debugsource@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nodejs-devel@10.16.3-2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
                "product": {
                  "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_id": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/npm@6.9.0-1.10.16.3.2.module%2Bel8.0.0%2B4214%2B49953fda?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
        },
        "product_reference": "nodejs:10:8000020190911085529:f8e95b4e",
        "relates_to_product_reference": "AppStream-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch"
        },
        "product_reference": "nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch"
        },
        "product_reference": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src"
        },
        "product_reference": "nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch"
        },
        "product_reference": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src"
        },
        "product_reference": "nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64"
        },
        "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le"
        },
        "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x"
        },
        "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64 as a component of nodejs:10:8000020190911085529:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        },
        "product_reference": "npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-5737",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-03-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1690808"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the original fix for Slowloris, CVE-2018-12122, was insufficient. It is possible to bypass the server\u0027s headersTimeout by sending two specially crafted HTTP requests in the same connection. An attacker could use this flaw to bypass Slowloris protection, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1690808",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/",
          "url": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/"
        }
      ],
      "release_date": "2019-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
          "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-30T15:15:54+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2925"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-debugsource-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-devel-debuginfo-1:10.16.3-2.module+el8.0.0+4214+49953fda.x86_64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-docs-1:10.16.3-2.module+el8.0.0+4214+49953fda.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-nodemon-0:1.18.3-1.module+el8+2632+6c5111ed.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.noarch",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:nodejs-packaging-0:17-3.module+el8+2873+aa7dfd9a.src",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.aarch64",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.ppc64le",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.s390x",
            "AppStream-8.0.0.Z:nodejs:10:8000020190911085529:f8e95b4e:npm-1:6.9.0-1.10.16.3.2.module+el8.0.0+4214+49953fda.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 zip release\nfor RHEL 6, RHEL 7 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys (CVE-2018-0737) * openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734) * mod_auth_digest: access control bypass due to race condition (CVE-2019-0217) * openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) * mod_session_cookie does not respect expiry time (CVE-2018-17199) * mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) * mod_http2: possible crash on late upgrade (CVE-2019-0197) * mod_http2: read-after-free on a string compare (CVE-2019-0196) * nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511) * nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513) * mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516) * mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3935",
        "url": "https://access.redhat.com/errata/RHSA-2019:3935"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1568253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
      },
      {
        "category": "external",
        "summary": "1644364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
      },
      {
        "category": "external",
        "summary": "1645695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
      },
      {
        "category": "external",
        "summary": "1668493",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
      },
      {
        "category": "external",
        "summary": "1668497",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
      },
      {
        "category": "external",
        "summary": "1695020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
      },
      {
        "category": "external",
        "summary": "1695030",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
      },
      {
        "category": "external",
        "summary": "1695042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "JBCS-798",
        "url": "https://issues.redhat.com/browse/JBCS-798"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3935.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release",
    "tracking": {
      "current_release_date": "2024-11-05T21:37:29+00:00",
      "generator": {
        "date": "2024-11-05T21:37:29+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:3935",
      "initial_release_date": "2019-11-20T16:08:18+00:00",
      "revision_history": [
        {
          "date": "2019-11-20T16:08:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-01-06T13:01:52+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:37:29+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services 1",
                "product": {
                  "name": "Red Hat JBoss Core Services 1",
                  "product_id": "Red Hat JBoss Core Services 1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0734",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-10-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1644364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: timing side channel attack in the DSA signature algorithm",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "RHBZ#1644364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0734",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734"
        }
      ],
      "release_date": "2018-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: timing side channel attack in the DSA signature algorithm"
    },
    {
      "cve": "CVE-2018-0737",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-04-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1568253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1568253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2018/04/16/3",
          "url": "http://www.openwall.com/lists/oss-security/2018/04/16/3"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20180416.txt",
          "url": "https://www.openssl.org/news/secadv/20180416.txt"
        }
      ],
      "release_date": "2018-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Alejandro Cabrera Aldaya"
          ],
          "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba"
        },
        {
          "names": [
            "Billy Bob Brumley",
            "Cesar Pereida Garcia",
            "Sohaib ul Hassan"
          ]
        },
        {
          "names": [
            "Nicola Tuveri"
          ],
          "organization": "Tampere University of Technology; Finland"
        }
      ],
      "cve": "CVE-2018-5407",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-11-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1645695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1645695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://github.com/bbbrumley/portsmash",
          "url": "https://github.com/bbbrumley/portsmash"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20181112.txt",
          "url": "https://www.openssl.org/news/secadv/20181112.txt"
        }
      ],
      "release_date": "2018-10-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue.  Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)"
    },
    {
      "cve": "CVE-2018-17189",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668497"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: DoS via slow, unneeded request bodies",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668497",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17189",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: DoS via slow, unneeded request bodies"
    },
    {
      "cve": "CVE-2018-17199",
      "cwe": {
        "id": "CWE-613",
        "name": "Insufficient Session Expiration"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668493"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_session_cookie does not respect expiry time",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668493",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_session_cookie does not respect expiry time"
    },
    {
      "cve": "CVE-2019-0196",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: read-after-free on a string compare",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: read-after-free on a string compare"
    },
    {
      "cve": "CVE-2019-0197",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695042"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: possible crash on late upgrade",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695042",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-02-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: possible crash on late upgrade"
    },
    {
      "cve": "CVE-2019-0217",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition was found in mod_auth_digest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_auth_digest: access control bypass due to race condition",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Based on the the fact that digest authentication is rarely used in modern day web applications and httpd package shipped with Red Hat products do not ship threaded MPM configuration by default, this flaw has been rated as having Moderate level security impact. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0217",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects a threaded server configuration, so using the prefork MPM is an effective mitigation.  In versions of httpd package shipped with Red Hat Enterprise Linux 7, the prefork MPM is the default configuration.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_auth_digest: access control bypass due to race condition"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:08:18+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3935"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nodejs10-nodejs is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.\n\nThe following packages have been upgraded to a later upstream version: rh-nodejs10-nodejs (10.16.3).\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* HTTP/2: flood using PRIORITY frames results in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2939",
        "url": "https://access.redhat.com/errata/RHSA-2019:2939"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2939.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nodejs10-nodejs security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:27:01+00:00",
      "generator": {
        "date": "2024-11-05T21:27:01+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2939",
      "initial_release_date": "2019-10-01T10:03:49+00:00",
      "revision_history": [
        {
          "date": "2019-10-01T10:03:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-10-01T10:03:49+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:27:01+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-Alt-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
                  "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
                "product": {
                  "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
                  "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
                  "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
                  "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
                  "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.s390x",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
                  "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
                "product": {
                  "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
                  "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
                  "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
                  "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
                  "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.aarch64",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
                  "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
                "product": {
                  "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
                  "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.src",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.src",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
                "product": {
                  "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
                  "product_id": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-docs@10.16.3-3.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
                  "product_id": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs@10.16.3-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
                  "product_id": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-devel@10.16.3-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
                  "product_id": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-npm@6.9.0-10.16.3.3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
                  "product_id": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-nodejs-debuginfo@10.16.3-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-0:3.2-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-0:3.2-3.el7.x86_64",
                  "product_id": "rh-nodejs10-0:3.2-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10@3.2-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
                  "product_id": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-runtime@3.2-3.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
                "product": {
                  "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
                  "product_id": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nodejs10-scldevel@3.2-3.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-Alt-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch"
        },
        "product_reference": "rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        },
        "product_reference": "rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-12121",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1661002"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB per connection), and carefully timed completion of the headers, it is possible to cause the HTTP server to abort from heap allocation failure. Attack potential is mitigated by the use of a load balancer or other proxy layer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Denial of Service with large HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12121"
        },
        {
          "category": "external",
          "summary": "RHBZ#1661002",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661002"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12121",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12121"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12121"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "nodejs: Denial of Service with large HTTP headers"
    },
    {
      "cve": "CVE-2018-12122",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1661005"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that Node.js HTTP server was vulnerable to a Slowloris type attack. An attacker could make long lived connections by sending bytes very slowly to the server, saturating its resource and possibly resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Slowloris HTTP Denial of Service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12122"
        },
        {
          "category": "external",
          "summary": "RHBZ#1661005",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661005"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12122",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12122"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12122"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Slowloris HTTP Denial of Service"
    },
    {
      "cve": "CVE-2018-12123",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2018-11-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1661010"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse() to determine the URL hostname, that hostname can be spoofed by using a mixed case \"javascript:\" (e.g. \"javAscript:\") protocol (other protocols are not affected). If security decisions are made about the URL based on the hostname, they may be incorrect.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Hostname spoofing in URL parser for javascript protocol",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The nodejs RPMs shipped in Red Hat OpenShift Container Platform (OCP) versions 3.6 through 3.10 are vulnerable to this flaw because they contain the affected code. Later versions of OCP used nodejs RPMs delivered from Red Hat Software Collections and Red Hat Enterprise Linux channels.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12123"
        },
        {
          "category": "external",
          "summary": "RHBZ#1661010",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1661010"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12123",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12123"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12123"
        }
      ],
      "release_date": "2018-11-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Hostname spoofing in URL parser for javascript protocol"
    },
    {
      "cve": "CVE-2019-5737",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-03-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1690808"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the original fix for Slowloris, CVE-2018-12122, was insufficient. It is possible to bypass the server\u0027s headersTimeout by sending two specially crafted HTTP requests in the same connection. An attacker could use this flaw to bypass Slowloris protection, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1690808",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1690808"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/",
          "url": "https://nodejs.org/ja/blog/vulnerability/february-2019-security-releases/"
        }
      ],
      "release_date": "2019-02-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "The use of a Load Balancer or a Reverse Proxy will increase the difficulty of the attack.",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
          "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-10-01T10:03:49+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2939"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-Alt-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.5.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.6.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3-7.7.Z:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Server-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.src",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-debuginfo-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-devel-0:10.16.3-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-nodejs-docs-0:10.16.3-3.el7.noarch",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-npm-0:6.9.0-10.16.3.3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-runtime-0:3.2-3.el7.x86_64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.aarch64",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.ppc64le",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.s390x",
            "7Workstation-RHSCL-3.3:rh-nodejs10-scldevel-0:3.2-3.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rh-nginx110-nginx is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.\n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2745",
        "url": "https://access.redhat.com/errata/RHSA-2019:2745"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2745.json"
      }
    ],
    "title": "Red Hat Security Advisory: rh-nginx110-nginx security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:24:11+00:00",
      "generator": {
        "date": "2024-11-05T21:24:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2745",
      "initial_release_date": "2019-09-13T08:40:34+00:00",
      "revision_history": [
        {
          "date": "2019-09-13T08:40:34+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-13T08:40:34+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:24:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-RHSCL-3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
                  "product_id": "7Server-RHSCL-3.3-7.4.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
                  "product_id": "7Server-RHSCL-3.3-7.5.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
                  "product_id": "7Server-RHSCL-3.3-7.6.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                "product": {
                  "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
                  "product_id": "7Server-RHSCL-3.3-7.7.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-image-filter@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-perl@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-xslt-filter@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-mail@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-stream@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
                  "product_id": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-debuginfo@1.10.2-9.el6.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-image-filter@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-perl@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-http-xslt-filter@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-mail@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-mod-stream@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
                "product": {
                  "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
                  "product_id": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx-debuginfo@1.10.2-9.el7.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
                "product": {
                  "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
                  "product_id": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el6.1?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
                "product": {
                  "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
                  "product_id": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-nginx110-nginx@1.10.2-9.el7.1?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
        "relates_to_product_reference": "6Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)",
          "product_id": "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.4.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)",
          "product_id": "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.5.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6)",
          "product_id": "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.6.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)",
          "product_id": "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3-7.7.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        },
        "product_reference": "rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:40:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2745"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:40:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2745"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
          "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
          "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-13T08:40:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take effect.",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2745"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.src",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el6.1.x86_64",
            "6Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el6.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.4.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.5.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.6.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3-7.7.Z:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Server-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.src",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-debuginfo-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-image-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-perl-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-http-xslt-filter-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-mail-1:1.10.2-9.el7.1.x86_64",
            "7Workstation-RHSCL-3.3:rh-nginx110-nginx-mod-stream-1:1.10.2-9.el7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the nginx:1.14 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 (Post Office Protocol 3) and IMAP protocols, with a focus on high concurrency, performance and low memory usage. \n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:2799",
        "url": "https://access.redhat.com/errata/RHSA-2019:2799"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2799.json"
      }
    ],
    "title": "Red Hat Security Advisory: nginx:1.14 security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:25:01+00:00",
      "generator": {
        "date": "2024-11-05T21:25:01+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:2799",
      "initial_release_date": "2019-09-19T07:37:12+00:00",
      "revision_history": [
        {
          "date": "2019-09-19T07:37:12+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-09-19T07:37:12+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:25:01+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.0.0.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx:1.14:8000020190830002848:f8e95b4e",
                "product": {
                  "name": "nginx:1.14:8000020190830002848:f8e95b4e",
                  "product_id": "nginx:1.14:8000020190830002848:f8e95b4e",
                  "product_identification_helper": {
                    "purl": "pkg:rpmmod/redhat/nginx@1.14:8000020190830002848:f8e95b4e"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                "product": {
                  "name": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                  "product_id": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-all-modules@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                "product": {
                  "name": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                  "product_id": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-filesystem@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=noarch\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                "product": {
                  "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                "product": {
                  "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                "product": {
                  "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-debugsource@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-image-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-perl-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-http-xslt-filter-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-mail-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                "product": {
                  "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_id": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/nginx-mod-stream-debuginfo@1.14.1-9.module%2Bel8.0.0%2B4108%2Baf250afe?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
        },
        "product_reference": "nginx:1.14:8000020190830002848:f8e95b4e",
        "relates_to_product_reference": "AppStream-8.0.0.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch"
        },
        "product_reference": "nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch"
        },
        "product_reference": "nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64"
        },
        "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le"
        },
        "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x"
        },
        "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64 as a component of nginx:1.14:8000020190830002848:f8e95b4e as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        },
        "product_reference": "nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
        "relates_to_product_reference": "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-19T07:37:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2799"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-19T07:37:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2799"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
          "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-09-19T07:37:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:2799"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.src",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-all-modules-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-debugsource-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-filesystem-1:1.14.1-9.module+el8.0.0+4108+af250afe.noarch",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-image-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-perl-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-http-xslt-filter-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-mail-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.aarch64",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.ppc64le",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.s390x",
            "AppStream-8.0.0.Z:nginx:1.14:8000020190830002848:f8e95b4e:nginx-mod-stream-debuginfo-1:1.14.1-9.module+el8.0.0+4108+af250afe.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for JBoss Core Services on RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.29 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys (CVE-2018-0737)\n* openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734)\n* mod_auth_digest: access control bypass due to race condition (CVE-2019-0217)\n* openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407)\n* mod_session_cookie does not respect expiry time (CVE-2018-17199)\n* mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)\n* mod_http2: possible crash on late upgrade (CVE-2019-0197)\n* mod_http2: read-after-free on a string compare (CVE-2019-0196)\n* nghttp2: HTTP/2: large amount of data request leads to denial of service (CVE-2019-9511)\n* nghttp2: HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption (CVE-2019-9513)\n* mod_http2: HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n* mod_http2: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3933",
        "url": "https://access.redhat.com/errata/RHSA-2019:3933"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1568253",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
      },
      {
        "category": "external",
        "summary": "1644364",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
      },
      {
        "category": "external",
        "summary": "1645695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
      },
      {
        "category": "external",
        "summary": "1668493",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
      },
      {
        "category": "external",
        "summary": "1668497",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
      },
      {
        "category": "external",
        "summary": "1695020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
      },
      {
        "category": "external",
        "summary": "1695030",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
      },
      {
        "category": "external",
        "summary": "1695042",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
      },
      {
        "category": "external",
        "summary": "1735741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "JBCS-798",
        "url": "https://issues.redhat.com/browse/JBCS-798"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3933.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 7",
    "tracking": {
      "current_release_date": "2024-11-05T21:36:45+00:00",
      "generator": {
        "date": "2024-11-05T21:36:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2019:3933",
      "initial_release_date": "2019-11-20T16:14:21+00:00",
      "revision_history": [
        {
          "date": "2019-11-20T16:14:21+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-01-06T13:04:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:36:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                  "product_id": "7Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.11-20.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.11-20.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.6.3-63.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.6.3-63.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1-25.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-48.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-7.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-7.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-4.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-4.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.64.1-14.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.64.1-14.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.64.1-14.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-33.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-33.jbcs.el7?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-33.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.46-22.redhat_1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.46-22.redhat_1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.46-22.redhat_1.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.12-9.Final_redhat_2.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-16.GA.jbcs.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.11-20.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.6.3-63.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1-25.jbcs.el7?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-48.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-7.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-4.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.64.1-14.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-33.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.46-22.redhat_1.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.12-9.Final_redhat_2.jbcs.el7?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-16.GA.jbcs.el7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-33.jbcs.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0734",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-10-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1644364"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: timing side channel attack in the DSA signature algorithm",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "RHBZ#1644364",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0734",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0734"
        }
      ],
      "release_date": "2018-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: timing side channel attack in the DSA signature algorithm"
    },
    {
      "cve": "CVE-2018-0737",
      "cwe": {
        "id": "CWE-385",
        "name": "Covert Timing Channel"
      },
      "discovery_date": "2018-04-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1568253"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "OpenSSL RSA key generation was found to be vulnerable to cache side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover parts of the private key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "RHBZ#1568253",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-0737",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2018/04/16/3",
          "url": "http://www.openwall.com/lists/oss-security/2018/04/16/3"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20180416.txt",
          "url": "https://www.openssl.org/news/secadv/20180416.txt"
        }
      ],
      "release_date": "2018-04-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Alejandro Cabrera Aldaya"
          ],
          "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba"
        },
        {
          "names": [
            "Billy Bob Brumley",
            "Cesar Pereida Garcia",
            "Sohaib ul Hassan"
          ]
        },
        {
          "names": [
            "Nicola Tuveri"
          ],
          "organization": "Tampere University of Technology; Finland"
        }
      ],
      "cve": "CVE-2018-5407",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-11-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1645695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1645695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://github.com/bbbrumley/portsmash",
          "url": "https://github.com/bbbrumley/portsmash"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20181112.txt",
          "url": "https://www.openssl.org/news/secadv/20181112.txt"
        }
      ],
      "release_date": "2018-10-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue.  Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)"
    },
    {
      "cve": "CVE-2018-17189",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668497"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: DoS via slow, unneeded request bodies",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668497",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668497"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17189",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17189"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17189"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: DoS via slow, unneeded request bodies"
    },
    {
      "cve": "CVE-2018-17199",
      "cwe": {
        "id": "CWE-613",
        "name": "Insufficient Session Expiration"
      },
      "discovery_date": "2019-01-22T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1668493"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_session_cookie does not respect expiry time",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "RHBZ#1668493",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1668493"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-17199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-17199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17199"
        }
      ],
      "release_date": "2019-01-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_session_cookie does not respect expiry time"
    },
    {
      "cve": "CVE-2019-0196",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: read-after-free on a string compare",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0196",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0196"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: read-after-free on a string compare"
    },
    {
      "cve": "CVE-2019-0197",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695042"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_http2: possible crash on late upgrade",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695042",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695042"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0197"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-02-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_http2: possible crash on late upgrade"
    },
    {
      "cve": "CVE-2019-0217",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "discovery_date": "2019-04-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1695020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A race condition was found in mod_auth_digest when the web server was running in a threaded MPM configuration. It could allow a user with valid credentials to authenticate using another username, bypassing configured access control restrictions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_auth_digest: access control bypass due to race condition",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Based on the the fact that digest authentication is rarely used in modern day web applications and httpd package shipped with Red Hat products do not ship threaded MPM configuration by default, this flaw has been rated as having Moderate level security impact. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "RHBZ#1695020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0217",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0217"
        },
        {
          "category": "external",
          "summary": "http://www.apache.org/dist/httpd/CHANGES_2.4",
          "url": "http://www.apache.org/dist/httpd/CHANGES_2.4"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2019-04-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "This flaw only affects a threaded server configuration, so using the prefork MPM is an effective mitigation.  In versions of httpd package shipped with Red Hat Enterprise Linux 7, the prefork MPM is the default configuration.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_auth_digest: access control bypass due to race condition"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9513",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, using PRIORITY frames to flood the system, could cause excessive CPU usage and starvation of other clients. The largest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for packages nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9513",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9513"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/",
          "url": "https://nghttp2.org/blog/2019/08/19/nghttp2-v1-39-2/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: flood using PRIORITY frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:14:21+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3933"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.6.3-63.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-48.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-7.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-33.jbcs.el7.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.11-20.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.64.1-14.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.12-9.Final_redhat_2.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.46-22.redhat_1.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.46-22.redhat_1.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-16.GA.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-33.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-4.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1-25.jbcs.el7.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1-25.jbcs.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AMQ Broker 7.6 is now available from the Red Hat Customer Portal.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "AMQ Broker is a high-performance messaging implementation based on ActiveMQ Artemis. It uses an asynchronous journal for fast message persistence, and supports multiple languages, protocols, and platforms. \n\nThis release of Red Hat AMQ Broker 7.6.0 serves as a replacement for Red Hat AMQ Broker 7.5.0, and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.\n\nSecurity Fix(es):\n\n* netty: HTTP request smuggling (CVE-2019-20444)\n\n* netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header (CVE-2019-20445)\n\n* jetty: HTTP/2: large amount of data requests leads to denial of service (CVE-2019-9511)\n\n* jetty: HTTP/2: flood using PING frames results in unbounded memory growth (CVE-2019-9512)\n\n* jetty: HTTP/2: flood using HEADERS frames results in unbounded memory growth (CVE-2019-9514)\n\n* jetty: HTTP/2: flood using SETTINGS frames results in unbounded memory growth (CVE-2019-9515)\n\n* jetty: HTTP/2: 0-length headers lead to denial of service (CVE-2019-9516)\n\n* jetty: HTTP/2: request for large response leads to denial of service (CVE-2019-9517)\n\n* jetty: HTTP/2: flood using empty frames results in excessive resource consumption (CVE-2019-9518)\n\n* jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions (CVE-2019-10241)\n\n* jetty: error path information disclosure (CVE-2019-10247)\n\n* mqtt-client: activemq: Corrupt MQTT frame can cause broker shutdown (CVE-2019-0222)\n\n* netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers (CVE-2019-16869)\n\n* netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling (CVE-2020-7238)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2020:0922",
        "url": "https://access.redhat.com/errata/RHSA-2020:0922"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.broker\u0026version=7.6.0\u0026productChanged=yes",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions\u0026product=jboss.amq.broker\u0026version=7.6.0\u0026productChanged=yes"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.6/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.6/"
      },
      {
        "category": "external",
        "summary": "1696012",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696012"
      },
      {
        "category": "external",
        "summary": "1705924",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924"
      },
      {
        "category": "external",
        "summary": "1705993",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993"
      },
      {
        "category": "external",
        "summary": "1735645",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
      },
      {
        "category": "external",
        "summary": "1735744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
      },
      {
        "category": "external",
        "summary": "1735745",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
      },
      {
        "category": "external",
        "summary": "1735749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
      },
      {
        "category": "external",
        "summary": "1741860",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
      },
      {
        "category": "external",
        "summary": "1741864",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
      },
      {
        "category": "external",
        "summary": "1741868",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
      },
      {
        "category": "external",
        "summary": "1758619",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
      },
      {
        "category": "external",
        "summary": "1796225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
      },
      {
        "category": "external",
        "summary": "1798509",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
      },
      {
        "category": "external",
        "summary": "1798524",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0922.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AMQ Broker 7.6 release and security update",
    "tracking": {
      "current_release_date": "2024-11-05T21:55:23+00:00",
      "generator": {
        "date": "2024-11-05T21:55:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2020:0922",
      "initial_release_date": "2020-03-23T08:21:33+00:00",
      "revision_history": [
        {
          "date": "2020-03-23T08:21:33+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2020-03-23T08:21:33+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T21:55:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AMQ",
                "product": {
                  "name": "Red Hat AMQ",
                  "product_id": "Red Hat AMQ",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:amq_broker:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss AMQ"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-0222",
      "discovery_date": "2019-03-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1696012"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "activemq: Corrupt MQTT frame can cause broker shutdown",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0222"
        },
        {
          "category": "external",
          "summary": "RHBZ#1696012",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1696012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0222",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0222"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0222",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0222"
        }
      ],
      "release_date": "2019-03-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "activemq: Corrupt MQTT frame can cause broker shutdown"
    },
    {
      "cve": "CVE-2019-9511",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741860"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker can request a large amount of data by manipulating window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this queue can consume excess CPU, memory, or both, leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: large amount of data requests leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "There are no mitigations available for nghttp2 and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741860",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741860"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9511",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9511"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: large amount of data requests leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9512",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735645"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using PING frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735645",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735645"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9512"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using PING frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9514",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using HEADER frames with invalid HTTP headers and queuing of response RST_STREAM frames, an attacker could cause a flood resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using HEADERS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The golang package in Red Hat OpenStack Platform 9 Operational Tools will not be updated for this flaw because it is in technical preview and is retiring as of 24.Aug.2019.\nThis issue did not affect the versions of grafana(embeds golang) as shipped with Red Hat Ceph Storage 2 and Red Hat Gluster Storage 3 as they did not include the support for HTTP/2.\nThe following storage product versions are affected because they include the support for HTTP/2 in:\n* golang as shipped with Red Hat Gluster Storage 3, Red Hat Ceph Storage 2 and Red Hat Ceph Storage 3\n* heketi(embeds golang) as shipped with Red Hat Gluster Storage 3\n* grafana(embeds golang and grpc) as shipped with Red Hat Ceph Storage 3\nThis flaw has no available mitigation for packages golang and nodejs. Both packages will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.\n\nAll OpenShift Container Platform RPMs and container images that are built with Go and support HTTP/2 are vulnerable to this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9514",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9514"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg",
          "url": "https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA",
          "url": "https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using HEADERS frames results in unbounded memory growth"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9515",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735745"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the version of grafana(embeds gRPC) as shipped with Red Hat Ceph Storage 3 as it include the support for HTTP/2.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735745",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735745"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9515",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9515"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html",
          "url": "https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using SETTINGS frames results in unbounded memory growth"
    },
    {
      "cve": "CVE-2019-9516",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741864"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: 0-length headers lead to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741864",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741864"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9516",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://github.com/nghttp2/nghttp2/issues/1382#",
          "url": "https://github.com/nghttp2/nghttp2/issues/1382#"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        },
        {
          "category": "external",
          "summary": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/",
          "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "Red Hat Quay 3.0 uses Nginx 1.12 from Red Hat Software Collections. It will be updated once a fixed is released for Software Collections. In the meantime users of Quay can disable http/2 support in Nginx by following these instructions:\n\n1. Copy the Nginx configuration from the quay container to the host\n$ docker cp 3aadf1421ba3:/quay-registry/conf/nginx/ /mnt/quay/nginx\n\n2. Edit the Nginx configuration, removing http/2 support\n$ sed -i \u0027s/http2 //g\u0027 /mnt/quay/nginx/nginx.conf\n\n3. Restart Nginx with the new configuration mounted into the container, eg:\n$ docker run --restart=always -p 443:8443 -p 80:8080 --sysctl net.core.somaxconn=4096 -v /mnt/quay/config:/conf/stack:Z -v /mnt/quay/storage:/datastorage -v /mnt/quay/nginx:/quay-registry/config/nginx:Z -d quay.io/redhat/quay:v3.0.3",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: 0-length headers lead to denial of service"
    },
    {
      "cve": "CVE-2019-9517",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1741868"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server\u0027s queue is setup, the responses can consume excess memory, CPU, or both, potentially leading to a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: request for large response leads to denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The package httpd versions as shipped with Red Hat Enterprise Linux 5, 6 and 7 are not affected by this issue as HTTP/2 support is not provided.\nThis flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "RHBZ#1741868",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1741868"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9517"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/605641/",
          "url": "https://kb.cert.org/vuls/id/605641/"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "The httpd version shipped with Red Hat Enterprise Linux 8 provides HTTP/2 support through mod_http2 package. While mod_http2 package is not updated, users can disable HTTP/2 support as mitigation action by executing the following steps:\n\n1. Stop httpd service:\n$ systemctl stop httpd\n\n2. Remove http/2 protocol support from configuration files:\n$ sed -i \u0027s/\\(h2\\)\\|\\(h2c\\)//g\u0027 \u003chttpd_config_file\u003e\n\n3. Validate configuration files to make sure all syntax is valid:\n$ apachectl configtest\n\n4. Restart httpd service:\n$ systemctl start httpd",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: request for large response leads to denial of service"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Envoy security team"
          ]
        }
      ],
      "cve": "CVE-2019-9518",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-08-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1735749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTP/2. Using frames with an empty payload, a flood could occur that results in excessive CPU usage and starvation of other clients. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "HTTP/2: flood using empty frames results in excessive resource consumption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has no available mitigation for nodejs package. It will be updated once the available fixes are released for Red Hat Enterprise Linux and Red Hat Software Collections.\n\nThe nodejs RPM shipped in OpenShift Container Platform 3.9 and 3.10 is not affected by this flaw as it does not contain the vulnerable code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "RHBZ#1735749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-9518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9518"
        },
        {
          "category": "external",
          "summary": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
          "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
        },
        {
          "category": "external",
          "summary": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/",
          "url": "https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/"
        }
      ],
      "release_date": "2019-08-13T17:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "HTTP/2: flood using empty frames results in excessive resource consumption"
    },
    {
      "cve": "CVE-2019-10241",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705924"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705924",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705924"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10241",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10241"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10241"
        }
      ],
      "release_date": "2019-04-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions"
    },
    {
      "cve": "CVE-2019-10247",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2019-04-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1705993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jetty: error path information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of jetty which is embedded in the nutch package as shipped with Red Hat Satellite 5. The jetty server is not exposed, as such exploitation is difficult, Red Hat Product Security has rated this issue as having security impact of Low in the context of Red Hat Satellite 5. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "RHBZ#1705993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1705993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10247",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10247"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10247"
        }
      ],
      "release_date": "2019-04-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "jetty: error path information disclosure"
    },
    {
      "cve": "CVE-2019-16869",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2019-09-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1758619"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where whitespace before the colon in HTTP headers is mishandled. This flaw allows an attacker to cause HTTP request smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that this vulnerability does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "RHBZ#1758619",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1758619"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-16869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869"
        }
      ],
      "release_date": "2019-09-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling by mishandled whitespace before the colon in HTTP headers"
    },
    {
      "cve": "CVE-2019-20444",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798524"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF (carriage return, line feed) without being followed by SP (space) or HTAB (horizontal tab), result in situations where headers can be misread. Data integrity is the highest threat with this vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP request smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not pose a substantial practical threat to ElasticSearch 6. We agree that these issues would be difficult to exploit on OpenShift Container Platform so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798524",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798524"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20444",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20444"
        },
        {
          "category": "external",
          "summary": "https://github.com/elastic/elasticsearch/issues/49396",
          "url": "https://github.com/elastic/elasticsearch/issues/49396"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP request smuggling"
    },
    {
      "cve": "CVE-2019-20445",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1798509"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty before version 4.1.44, where it accepted multiple Content-Length headers and also accepted both Transfer-Encoding, as well as Content-Length headers where it should reject the message under such circumstances. In circumstances where Netty is used in the context of a server, it could result in a viable HTTP smuggling vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships a vulnerable version of netty embedded in Candlepin. However, the flaw can not be triggered in that context, because HTTP requests are handled by Tomcat, not by netty. A future release may fix this.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "RHBZ#1798509",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1798509"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-20445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20445"
        }
      ],
      "release_date": "2020-01-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HttpObjectDecoder.java allows Content-Length header to accompanied by second Content-Length header"
    },
    {
      "cve": "CVE-2020-7238",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2020-01-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1796225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty, where it mishandles Transfer-Encoding whitespace. This flaw allows HTTP Request Smuggling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "OpenShift Container Platform ships a vulnerable netty library as part of the logging-elasticsearch5 container. ElasticSearch\u0027s security team has stated that the previous vulnerability, CVE-2019-16869, does not poses a substantial practical threat to ElasticSearch 6 [1]. We agree that this issue would be difficult to exploit both these vulnerabilities on OpenShift Container Platform, so we\u0027re reducing the impact of this issue to moderate and may fix it in the future release.\n\nRed Hat Satellite ships vulnerable netty version embedded in Candlepin, however, is not directly vulnerable since HTTP requests are handled by Tomcat and not netty.\n\n[1]  https://github.com/elastic/elasticsearch/issues/49396",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AMQ"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "RHBZ#1796225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1796225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-7238",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7238"
        },
        {
          "category": "external",
          "summary": "https://netty.io/news/2019/12/18/4-1-44-Final.html",
          "url": "https://netty.io/news/2019/12/18/4-1-44-Final.html"
        }
      ],
      "release_date": "2020-01-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2020-03-23T08:21:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat AMQ"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2020:0922"
        },
        {
          "category": "workaround",
          "details": "* Use HTTP/2 instead (clear boundaries between requests)\n* Disable reuse of backend connections eg. ```http-reuse never``` in HAProxy or whatever equivalent LB settings",
          "product_ids": [
            "Red Hat AMQ"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AMQ"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling"
    }
  ]
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201908-0266",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.1"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "10.0"
      },
      {
        "model": "web gateway",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "7.7.2.0"
      },
      {
        "model": "web gateway",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "7.7.2.24"
      },
      {
        "model": "vs960hd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "32"
      },
      {
        "model": "node.js",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "8.16.1"
      },
      {
        "model": "openshift service mesh",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "1.0"
      },
      {
        "model": "software collections",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "1.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "29"
      },
      {
        "model": "graalvm",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "19.2.0"
      },
      {
        "model": "node.js",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "10.0.0"
      },
      {
        "model": "jboss enterprise application platform",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.2.0"
      },
      {
        "model": "web gateway",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "8.2.0"
      },
      {
        "model": "nginx",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "1.17.0"
      },
      {
        "model": "jboss enterprise application platform",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "7.3.0"
      },
      {
        "model": "node.js",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "12.0.0"
      },
      {
        "model": "nginx",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "1.17.2"
      },
      {
        "model": "traffic server",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "8.0.0"
      },
      {
        "model": "node.js",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "8.0.0"
      },
      {
        "model": "diskstation manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "6.2"
      },
      {
        "model": "node.js",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "12.8.1"
      },
      {
        "model": "swiftnio",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apple",
        "version": "1.4.0"
      },
      {
        "model": "traffic server",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "7.0.0"
      },
      {
        "model": "quay",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "3.0.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "model": "jboss core services",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "1.0"
      },
      {
        "model": "traffic server",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "7.1.6"
      },
      {
        "model": "enterprise linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "redhat",
        "version": "8.0"
      },
      {
        "model": "web gateway",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "8.1.0"
      },
      {
        "model": "node.js",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "nodejs",
        "version": "10.16.3"
      },
      {
        "model": "nginx",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "1.9.5"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.0"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "16.04"
      },
      {
        "model": "traffic server",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "8.0.3"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "30"
      },
      {
        "model": "web gateway",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "7.8.2.13"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "18.04"
      },
      {
        "model": "skynas",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "nginx",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "f5",
        "version": "1.16.1"
      },
      {
        "model": "swiftnio",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apple",
        "version": "1.0.0"
      },
      {
        "model": "web gateway",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "mcafee",
        "version": "7.8.2.0"
      },
      {
        "model": "ubuntu linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "canonical",
        "version": "19.04"
      },
      {
        "model": "traffic server",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "6.0.0"
      },
      {
        "model": "traffic server",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "6.2.3"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "akamai",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "amazon",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "apache traffic server",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "apple",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "cloudflare",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "envoy",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "facebook",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "go programming language",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "litespeed",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "microsoft",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "netty",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "node js",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "twisted",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "ubuntu",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "grpc",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "nghttp2",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "nginx",
        "version": null
      },
      {
        "model": "traffic server",
        "scope": null,
        "trust": 0.8,
        "vendor": "apache",
        "version": null
      },
      {
        "model": "ubuntu",
        "scope": null,
        "trust": 0.8,
        "vendor": "canonical",
        "version": null
      },
      {
        "model": "gnu/linux",
        "scope": null,
        "trust": 0.8,
        "vendor": "debian",
        "version": null
      },
      {
        "model": "fedora",
        "scope": null,
        "trust": 0.8,
        "vendor": "fedora",
        "version": null
      },
      {
        "model": "diskstation manager",
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "skynas",
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "vs960hd",
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "swiftnio",
        "scope": null,
        "trust": 0.8,
        "vendor": "apple",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9516"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:apple:swiftnio:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "1.4.0",
                    "versionStartIncluding": "1.0.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionStartIncluding": "10.12",
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionStartIncluding": "14.04",
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.0.3",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "7.1.6",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "6.2.3",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:graalvm:19.2.0:*:*:*:enterprise:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.7.2.24",
                "versionStartIncluding": "7.7.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.8.2.13",
                "versionStartIncluding": "7.8.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.2.0",
                "versionStartIncluding": "8.1.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "1.16.1",
                "versionStartIncluding": "1.9.5",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.17.2",
                "versionStartIncluding": "1.17.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "12.8.1",
                "versionStartIncluding": "12.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.16.1",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "10.16.3",
                "versionStartIncluding": "10.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9516"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Red Hat",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "154712"
      },
      {
        "db": "PACKETSTORM",
        "id": "155417"
      },
      {
        "db": "PACKETSTORM",
        "id": "154470"
      },
      {
        "db": "PACKETSTORM",
        "id": "154697"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "154533"
      },
      {
        "db": "PACKETSTORM",
        "id": "156852"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      }
    ],
    "trust": 0.8
  },
  "cve": "CVE-2019-9516",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 8.0,
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "MEDIUM",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Complete",
            "baseScore": 7.8,
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2019-9516",
            "impactScore": null,
            "integrityImpact": "None",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "VHN-160951",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "VULMON",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 8.0,
            "id": "CVE-2019-9516",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "MEDIUM",
            "trust": 0.1,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 2.8,
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "cret@cert.org",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2019-9516",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2019-9516",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "cret@cert.org",
            "id": "CVE-2019-9516",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2019-9516",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201908-938",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-160951",
            "trust": 0.1,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2019-9516",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160951"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9516"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201908-938"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9516"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9516"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory. Multiple HTTP/2 implementations are vulnerable to a variety of denial-of-service (DoS) attacks. Apple SwiftNIO Used in products such as HTTP/2 Contains a resource exhaustion vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. HTTP/2 is the second version of the hypertext transfer protocol, which is mainly used to ensure the communication between the client and the server. A resource management error vulnerability exists in HTTP/2. A vulnerability in the HTTP/2 implementation of Nginx could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on a targeted system. \nThe vulnerability is due to improper parsing of zero length headers by the affected software that could lead to excessive CPU usage.  An attacker could exploit this vulnerability by sending a request that\nsubmits malicious input to an affected system. A successful exploit\ncould result in a DoS condition on the targeted system. \nnginx.org has confirmed the vulnerability and released software updates. \n\nFor the oldstable distribution (stretch), these problems have been fixed\nin version 1.10.3-1+deb9u3. \n\nFor the stable distribution (buster), these problems have been fixed in\nversion 1.14.2-2+deb10u1. \n\nWe recommend that you upgrade your nginx packages. \n\nFor the detailed security status of nginx please refer to\nits security tracker page at:\nhttps://security-tracker.debian.org/tracker/nginx\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n\niQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAl1e7q4ACgkQEMKTtsN8\nTjanPg/+JLLuKVdUDpVPFNkX1ckmT5gsoCwzGz3ybhcDMxbf7jD8jtmXFiGFn4fP\nMXsx6MgrRZn3hq+2VF6MKZjKh9n1hBX38PkqjHKEtV6Xzor97xxLH0rrMlBMEQ7y\nrz96YTffJfcj+ykI3Vlye1GGDEiKyu0vWgoutXH3i8GUYFyDk//HQdI0eJLQhkfo\nTMRdbAKmMGeMt/8tSz4G0wewdxc9xjNwE1lKkV22JbT6t656f5QtvOLxt2HvM5c4\ngFtFFBv7e1ymh0CKz4VxOxjEH+4ogx5HfzcYP2LjaZJsCFOw8ZUbdieFhlF0R2jH\nvskBuYLPa/djYHoZ55KY/WTmTsn72y7ZEuQcAdiHRVjg6wRFaum/KkdwutBBCeEj\nodvrGUcgdLLx4uAC7JOt9HME77Rgu1wTnx3l9L3QCwxIXpHqL8zOuSrSKYDuntDT\nagQ/awapEYYK5IAgo7YGkhHHHbTSLQ2UX9KfmyoPXJ+H9Vl/XjGhPwdDSEYNqrE9\nIKQ8gaFCVOgjJo8lTa5NBsvxa08Gh6jQGZo8Rgfjs4KvUS847Cpb086BvU9pMs36\n46+cLbkJ2jkfMLd4slZ5Gf2wkagUJmeZD5O7bY90Szs/IUOJez0LWaN3l7VSMtvY\na3a/Y53cX1QYt60eiE6x/ifraOHzcsJglrUNmK8VPfJ9tSTFhWY=+ZOE\n-----END PGP SIGNATURE-----\n. Description:\n\nThis release adds the new Apache HTTP Server 2.4.37 packages that are part\nof the JBoss Core Services offering. \n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack\nApache Server 2.4.29 and includes bug fixes and enhancements. Refer to the\nRelease Notes for information on the most significant bug fixes and\nenhancements included in this release. After installing the updated\npackages, the httpd daemon will be restarted automatically. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n====================================================================                   \nRed Hat Security Advisory\n\nSynopsis:          Important: rh-nginx110-nginx security update\nAdvisory ID:       RHSA-2019:2745-01\nProduct:           Red Hat Software Collections\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2019:2745\nIssue date:        2019-09-12\nCVE Names:         CVE-2019-9511 CVE-2019-9513 CVE-2019-9516\n====================================================================\n1. Summary:\n\nAn update for rh-nginx110-nginx is now available for Red Hat Software\nCollections. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) - x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) - x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) - x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) - x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) - x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) - x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64\n\n3. Description:\n\nnginx is a web and proxy server supporting HTTP and other protocols, with a\nfocus on high concurrency, performance, and low memory usage. \n\nSecurity Fix(es):\n\n* HTTP/2: large amount of data request leads to denial of service\n(CVE-2019-9511)\n\n* HTTP/2: flood using PRIORITY frames resulting in excessive resource\nconsumption (CVE-2019-9513)\n\n* HTTP/2: 0-length headers leads to denial of service (CVE-2019-9516)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe rh-nginx110-nginx service must be restarted for this update to take\neffect. \n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1735741 - CVE-2019-9513 HTTP/2: flood using PRIORITY frames resulting in excessive resource consumption\n1741860 - CVE-2019-9511 HTTP/2: large amount of data request leads to denial of service\n1741864 - CVE-2019-9516 HTTP/2: 0-length headers leads to denial of service\n\n6. Package List:\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 6):\n\nSource:\nrh-nginx110-nginx-1.10.2-9.el6.1.src.rpm\n\nx86_64:\nrh-nginx110-nginx-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-debuginfo-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-image-filter-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-perl-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-xslt-filter-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-mail-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-stream-1.10.2-9.el6.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6):\n\nSource:\nrh-nginx110-nginx-1.10.2-9.el6.1.src.rpm\n\nx86_64:\nrh-nginx110-nginx-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-debuginfo-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-image-filter-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-perl-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-xslt-filter-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-mail-1.10.2-9.el6.1.x86_64.rpm\nrh-nginx110-nginx-mod-stream-1.10.2-9.el6.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-nginx110-nginx-1.10.2-9.el7.1.src.rpm\n\nx86_64:\nrh-nginx110-nginx-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-debuginfo-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-image-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-perl-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-xslt-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-mail-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-stream-1.10.2-9.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4):\n\nSource:\nrh-nginx110-nginx-1.10.2-9.el7.1.src.rpm\n\nx86_64:\nrh-nginx110-nginx-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-debuginfo-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-image-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-perl-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-xslt-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-mail-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-stream-1.10.2-9.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5):\n\nSource:\nrh-nginx110-nginx-1.10.2-9.el7.1.src.rpm\n\nx86_64:\nrh-nginx110-nginx-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-debuginfo-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-image-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-perl-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-xslt-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-mail-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-stream-1.10.2-9.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6):\n\nSource:\nrh-nginx110-nginx-1.10.2-9.el7.1.src.rpm\n\nx86_64:\nrh-nginx110-nginx-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-debuginfo-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-image-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-perl-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-xslt-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-mail-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-stream-1.10.2-9.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7):\n\nSource:\nrh-nginx110-nginx-1.10.2-9.el7.1.src.rpm\n\nx86_64:\nrh-nginx110-nginx-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-debuginfo-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-image-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-perl-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-xslt-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-mail-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-stream-1.10.2-9.el7.1.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-nginx110-nginx-1.10.2-9.el7.1.src.rpm\n\nx86_64:\nrh-nginx110-nginx-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-debuginfo-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-image-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-perl-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-http-xslt-filter-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-mail-1.10.2-9.el7.1.x86_64.rpm\nrh-nginx110-nginx-mod-stream-1.10.2-9.el7.1.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2019-9511\nhttps://access.redhat.com/security/cve/CVE-2019-9513\nhttps://access.redhat.com/security/cve/CVE-2019-9516\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2019 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niQIVAwUBXXoyktzjgjWX9erEAQhqVxAApUw26k8XmcjEQM1gNlPgcNvj98eqGOxP\nvsQLEYCjMQuNtZdeZdgSGv1RLdIxK60CByHpOpy4HVa2cN96CLTDl+cRd2l5JyK2\nmVCGTg6Iyin0Vp0gRLG8xwUZqiqfwRRmdvFaK2YD8sH3ykBAheg3udRBr11/l8X+\n4kBCmOttfl0ZTNe/VBi8j5l8bpSZm2W9Hw0gzdzFikI8ScPSOzZkmgRXT3LBCt2k\nrNGGNrrJLOC9jqwsNea6WXIpmTIdbtiAnL6V22adVjdBGkoJBxe79pqdgvJNYC14\nENl1NKX0UEidrYZ/PS6YtCnFNEpsONM43ZtHliEzMxYCnk/pQNAx4iArdf81tKG6\nuglPwQlgaEJm+/2Nnlst07cABT9boYOUcGiKpQhzzs9QuABqJN1u2ZgTDmQkq9gU\nBGuV3ejUHRHlYuMyNNS/L9SLDAHptsCEzpEzr8Vl4T+m1ah9+AUeI+PqgO1n/1Nl\nOmt/g+f6ErlKMF2Jf8VkuYnLroqptZefYQJ1+mP9PhYYCh7jw3r00xi036SNeR/0\nElhvl6t48tYTZogIaOetCuJGgukluOPlYBJAlj2/pQjWlAWAYvvb5ha0fitXbDJR\nLF0KoJoT/6yZLD+XAuHkM9j7spA0iND1czI5j1Ay6R6DnsGAubJxdB4L0RRQ2U7X\nzMtgbVh8BNU=zH69\n-----END PGP SIGNATURE-----\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. JIRA issues fixed (https://issues.jboss.org/):\n\nJBCS-826 - Rebase nghttp2 to 1.39.2\n\n7. 8) - aarch64, noarch, ppc64le, s390x, x86_64\n\n3. Description:\n\nAMQ Broker is a high-performance messaging implementation based on ActiveMQ\nArtemis. It uses an asynchronous journal for fast message persistence, and\nsupports multiple languages, protocols, and platforms. Solution:\n\nBefore applying the update, back up your existing installation, including\nall applications, configuration files, databases and database settings, and\nso on. \n\nThe References section of this erratum contains a download link (you must\nlog in to download the update). 7) - noarch, x86_64\n\n3. Description:\n\nNode.js is a software development platform for building fast and scalable\nnetwork applications in the JavaScript programming language. \n\nThe following packages have been upgraded to a later upstream version:\nrh-nodejs10-nodejs (10.16.3)",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9516"
      },
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160951"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9516"
      },
      {
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "db": "PACKETSTORM",
        "id": "154712"
      },
      {
        "db": "PACKETSTORM",
        "id": "155417"
      },
      {
        "db": "PACKETSTORM",
        "id": "154470"
      },
      {
        "db": "PACKETSTORM",
        "id": "154697"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "154533"
      },
      {
        "db": "PACKETSTORM",
        "id": "156852"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      }
    ],
    "trust": 3.33
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-9516",
        "trust": 3.5
      },
      {
        "db": "CERT/CC",
        "id": "VU#605641",
        "trust": 3.4
      },
      {
        "db": "MCAFEE",
        "id": "SB10296",
        "trust": 1.8
      },
      {
        "db": "JVN",
        "id": "JVNVU93696206",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU98433488",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-008116",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201908-938",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "154190",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "157214",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "156852",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.3116",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.3213",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.4788",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.3129",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.1076",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.3597.3",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.4645",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.4403",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.1335",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.3597.2",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.3299",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.0100",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.1030",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "156941",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "155414",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "154697",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "154698",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-160951",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9516",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154712",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "155417",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154470",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154533",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "154693",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160951"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9516"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "db": "PACKETSTORM",
        "id": "154712"
      },
      {
        "db": "PACKETSTORM",
        "id": "155417"
      },
      {
        "db": "PACKETSTORM",
        "id": "154470"
      },
      {
        "db": "PACKETSTORM",
        "id": "154697"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "154533"
      },
      {
        "db": "PACKETSTORM",
        "id": "156852"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201908-938"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9516"
      }
    ]
  },
  "id": "VAR-201908-0266",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160951"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2024-07-23T20:13:00.989000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "DSA-4505",
        "trust": 0.8,
        "url": "https://www.debian.org/security/2019/dsa-4505"
      },
      {
        "title": "FEDORA-2019-befd924cfe",
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/tazzevtcn2b4wt6aibj7xgyjmbtorju5/"
      },
      {
        "title": "FEDORA-2019-6a2980de56",
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4zqghe3wtylyayjeidjvf2figqtaypmc/"
      },
      {
        "title": "FEDORA-2019-5a6a7bc12c",
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/cmnfx5mnyrwwimo4btkyqcgudmho3axp/"
      },
      {
        "title": "SwiftNIO",
        "trust": 0.8,
        "url": "https://github.com/apple/swift-nio"
      },
      {
        "title": "Apache Traffic Server",
        "trust": 0.8,
        "url": "https://github.com/apache/trafficserver"
      },
      {
        "title": "Synology-SA-19:33 HTTP/2 DoS Attacks",
        "trust": 0.8,
        "url": "https://www.synology.com/ja-jp/security/advisory/synology_sa_19_33"
      },
      {
        "title": "USN-4099-1",
        "trust": 0.8,
        "url": "https://usn.ubuntu.com/4099-1/"
      },
      {
        "title": "HTTP/2 Remedial measures to achieve security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=96621"
      },
      {
        "title": "Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP3 security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192950 - security advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP3 security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192946 - security advisory"
      },
      {
        "title": "Red Hat: Important: rh-nginx110-nginx security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192745 - security advisory"
      },
      {
        "title": "Red Hat: Important: rh-nginx114-nginx security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192775 - security advisory"
      },
      {
        "title": "Red Hat: Important: nginx:1.14 security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192799 - security advisory"
      },
      {
        "title": "Red Hat: Important: rh-nginx112-nginx security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192746 - security advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat Quay v3.1.1 security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192966 - security advisory"
      },
      {
        "title": "Red Hat: CVE-2019-9516",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2019-9516"
      },
      {
        "title": "Debian CVElist Bug Report Logs: nginx: CVE-2019-9511 CVE-2019-9513 CVE-2019-9516",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=aa3f98e7e42f366cb232cf3ada195106"
      },
      {
        "title": "Ubuntu Security Notice: nginx vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=usn-4099-1"
      },
      {
        "title": "Debian Security Advisories: DSA-4505-1 nginx -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=b38c3ef2fccf5f32d01340c117d4ef05"
      },
      {
        "title": "Red Hat: Important: nodejs:10 security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192925 - security advisory"
      },
      {
        "title": "Arch Linux Issues: ",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=cve-2019-9516"
      },
      {
        "title": "Red Hat: Important: rh-nodejs8-nodejs security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192955 - security advisory"
      },
      {
        "title": "Red Hat: Important: rh-nodejs10-nodejs security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20192939 - security advisory"
      },
      {
        "title": "Arch Linux Advisories: [ASA-201908-13] nginx: denial of service",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201908-13"
      },
      {
        "title": "Amazon Linux AMI: ALAS-2019-1299",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2019-1299"
      },
      {
        "title": "Arch Linux Advisories: [ASA-201908-12] nginx-mainline: denial of service",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_advisories\u0026qid=asa-201908-12"
      },
      {
        "title": "Amazon Linux 2: ALAS2-2019-1342",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=alas2-2019-1342"
      },
      {
        "title": "Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20193935 - security advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20193932 - security advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 7",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20193933 - security advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat AMQ Broker 7.4.3 release and security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20201445 - security advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat AMQ Broker 7.6 release and security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20200922 - security advisory"
      },
      {
        "title": "Red Hat: Important: Red Hat Fuse 7.6.0 security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20200983 - security advisory"
      },
      {
        "title": "IBM: IBM Security Bulletin: Version 8.15.0 of Node.js included in IBM Cloud Event Management 2.3.0 has several security vulnerabilities.",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=3b9c6b5fbfb51d956856e88dff5a7acd"
      },
      {
        "title": "IBM: IBM Security Bulletin: Node.js vulnerabilities affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518)",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=5ad9418973cac91ba73c01ad16b1f5a4"
      },
      {
        "title": "IBM: IBM Security Bulletin: Multiple vulnerabilities affect IBM\u00ae SDK for Node.js\u2122 in IBM Cloud",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=89d19e42a01e098dd5f88e0433d2bb5d"
      },
      {
        "title": "IBM: Security Bulletin: IBM Cloud Transformation Advisor is affected by a Node.js vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=8f76cfb8f0c5ea84a0bc28705788f854"
      },
      {
        "title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=1ce0280dd79176d32c26f34906d1d4de"
      },
      {
        "title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM Cloud App Management",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=b76ff63209def4a949aa18bdf6b518b8"
      },
      {
        "title": "IBM: IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM i",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ibm_psirt_blog\u0026qid=247686da02fe524817c1939b0f6b6a5c"
      },
      {
        "title": "Fortinet Security Advisories: HTTP/2 Multiple DoS Attacks (VU#605641)",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=fortinet_security_advisories\u0026qid=fg-ir-19-225"
      },
      {
        "title": "bogeitingress",
        "trust": 0.1,
        "url": "https://github.com/lieshoujieyuan/bogeitingress "
      },
      {
        "title": "DC-4-Vulnhub-Walkthrough",
        "trust": 0.1,
        "url": "https://github.com/vshaliii/dc-4-vulnhub-walkthrough "
      },
      {
        "title": "",
        "trust": 0.1,
        "url": "https://github.com/khulnasoft-lab/awesome-security "
      },
      {
        "title": "Threatpost",
        "trust": 0.1,
        "url": "https://threatpost.com/http-bugs/147405/"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2019-9516"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201908-938"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-770",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-400",
        "trust": 0.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160951"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9516"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.6,
        "url": "https://github.com/netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
      },
      {
        "trust": 2.6,
        "url": "https://www.synology.com/security/advisory/synology_sa_19_33"
      },
      {
        "trust": 2.6,
        "url": "https://seclists.org/bugtraq/2019/aug/24"
      },
      {
        "trust": 2.6,
        "url": "https://kb.cert.org/vuls/id/605641/"
      },
      {
        "trust": 2.5,
        "url": "https://access.redhat.com/errata/rhsa-2019:3932"
      },
      {
        "trust": 2.5,
        "url": "https://usn.ubuntu.com/4099-1/"
      },
      {
        "trust": 2.4,
        "url": "https://www.debian.org/security/2019/dsa-4505"
      },
      {
        "trust": 2.4,
        "url": "https://access.redhat.com/errata/rhsa-2019:3933"
      },
      {
        "trust": 2.4,
        "url": "https://access.redhat.com/errata/rhsa-2019:3935"
      },
      {
        "trust": 2.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9516"
      },
      {
        "trust": 1.9,
        "url": "https://access.redhat.com/errata/rhsa-2019:2745"
      },
      {
        "trust": 1.9,
        "url": "https://access.redhat.com/errata/rhsa-2019:2799"
      },
      {
        "trust": 1.9,
        "url": "https://access.redhat.com/errata/rhsa-2019:2939"
      },
      {
        "trust": 1.9,
        "url": "https://access.redhat.com/errata/rhsa-2019:2946"
      },
      {
        "trust": 1.9,
        "url": "https://access.redhat.com/errata/rhsa-2019:2955"
      },
      {
        "trust": 1.8,
        "url": "https://seclists.org/bugtraq/2019/aug/40"
      },
      {
        "trust": 1.8,
        "url": "https://security.netapp.com/advisory/ntap-20190823-0002/"
      },
      {
        "trust": 1.8,
        "url": "https://security.netapp.com/advisory/ntap-20190823-0005/"
      },
      {
        "trust": 1.8,
        "url": "http://seclists.org/fulldisclosure/2019/aug/16"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2019:2746"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2019:2775"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2019:2925"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2019:2950"
      },
      {
        "trust": 1.8,
        "url": "https://access.redhat.com/errata/rhsa-2019:2966"
      },
      {
        "trust": 1.8,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html"
      },
      {
        "trust": 1.8,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
      },
      {
        "trust": 1.8,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html"
      },
      {
        "trust": 1.8,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html"
      },
      {
        "trust": 1.7,
        "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=sb10296"
      },
      {
        "trust": 1.6,
        "url": "https://blogs.akamai.com/sitr/2019/08/http2-vulnerabilities.html"
      },
      {
        "trust": 1.4,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9516"
      },
      {
        "trust": 1.2,
        "url": "https://support.f5.com/csp/article/k02591030"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4zqghe3wtylyayjeidjvf2figqtaypmc/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/bp556leg3wenhzi5taq6zebftjb4e2is/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/cmnfx5mnyrwwimo4btkyqcgudmho3axp/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/h472d5hpxn6rrxcnfml3bk5oyc52cxf2/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/popaec4fwl4uu4ldegpy5npalu24ffqd/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/tazzevtcn2b4wt6aibj7xgyjmbtorju5/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/xhtku7yq5eep2xnsav4m4vj7qcbojmod/"
      },
      {
        "trust": 1.0,
        "url": "https://support.f5.com/csp/article/k02591030?utm_source=f5support\u0026amp%3butm_medium=rss"
      },
      {
        "trust": 0.8,
        "url": "https://vuls.cert.org/confluence/pages/viewpage.action?pageid=56393752"
      },
      {
        "trust": 0.8,
        "url": "https://tools.ietf.org/html/rfc7540"
      },
      {
        "trust": 0.8,
        "url": "https://tools.ietf.org/html/rfc7541"
      },
      {
        "trust": 0.8,
        "url": "https://blog.cloudflare.com/on-the-recent-http-2-dos-attacks/"
      },
      {
        "trust": 0.8,
        "url": "https://blog.litespeedtech.com/2019/08/15/litespeed-addresses-http-2-dos-advisories/"
      },
      {
        "trust": 0.8,
        "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9511https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9512https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9513https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9514https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-9518"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/bp556leg3wenhzi5taq6zebftjb4e2is/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/cmnfx5mnyrwwimo4btkyqcgudmho3axp/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/xhtku7yq5eep2xnsav4m4vj7qcbojmod/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4zqghe3wtylyayjeidjvf2figqtaypmc/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/popaec4fwl4uu4ldegpy5npalu24ffqd/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/tazzevtcn2b4wt6aibj7xgyjmbtorju5/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/h472d5hpxn6rrxcnfml3bk5oyc52cxf2/"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu98433488/"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu93696206/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9511"
      },
      {
        "trust": 0.8,
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "trust": 0.8,
        "url": "https://access.redhat.com/security/cve/cve-2019-9516"
      },
      {
        "trust": 0.8,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.8,
        "url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.8,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.7,
        "url": "https://support.f5.com/csp/article/k02591030?utm_source=f5support\u0026utm_medium=rss"
      },
      {
        "trust": 0.7,
        "url": "https://access.redhat.com/security/cve/cve-2019-9511"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9513"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9517"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/cve/cve-2019-9517"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.6,
        "url": "http2-cves/"
      },
      {
        "trust": 0.6,
        "url": "https://www.cloudfoundry.org/blog/various-"
      },
      {
        "trust": 0.6,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9518"
      },
      {
        "trust": 0.6,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9517"
      },
      {
        "trust": 0.6,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9515"
      },
      {
        "trust": 0.6,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9514"
      },
      {
        "trust": 0.6,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9513"
      },
      {
        "trust": 0.6,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9512"
      },
      {
        "trust": 0.6,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9511"
      },
      {
        "trust": 0.6,
        "url": "https://support.f5.com/csp/article/k50233772"
      },
      {
        "trust": 0.6,
        "url": "http://mailman.nginx.org/pipermail/nginx-announce/2019/000249.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-201914246-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200059-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192254-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/157214/red-hat-security-advisory-2020-1445-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.4645/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.4403/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.3597.2/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.4788/"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/154190/debian-security-advisory-4505-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://pivotal.io/security/cve-2019-9517"
      },
      {
        "trust": 0.6,
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-node-js-affect-ibm-spectrum-protect-plus-cve-2019-15606-cve-2019-15604-cve-2019-15605-cve-2019-9511-cve-2019-9516-cve-2019-9512-cve-2019-9517-cve-2019-951/"
      },
      {
        "trust": 0.6,
        "url": "https://support.apple.com/en-us/ht210436"
      },
      {
        "trust": 0.6,
        "url": "https://www.ibm.com/support/pages/node/1143454"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.3116/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.3213/"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/156852/red-hat-security-advisory-2020-0922-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-kubernetes-affect-ibm-infosphere-information-server/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.3299/"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/156941/red-hat-security-advisory-2020-0983-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.1335/"
      },
      {
        "trust": 0.6,
        "url": "https://www.ibm.com/support/pages/node/1072144"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.3597.3/"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/155414/red-hat-security-advisory-2019-3935-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.ibm.com/support/pages/node/1150960"
      },
      {
        "trust": 0.6,
        "url": "https://www.ibm.com/support/pages/node/1137466"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.0100/"
      },
      {
        "trust": 0.6,
        "url": "https://www.ibm.com/support/pages/node/1167160"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/http-2-multiple-vulnerabilities-30040"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.3129/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.1076/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.1030/"
      },
      {
        "trust": 0.5,
        "url": "https://access.redhat.com/security/cve/cve-2019-9513"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9514"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9515"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2019-9512"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2019-9514"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2019-9515"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2019-9518"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9512"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9518"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-0222"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-20444"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10247"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-20445"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-20444"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-16869"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0222"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-7238"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2020-7238"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-10241"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-10247"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-16869"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2019-10241"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-20445"
      },
      {
        "trust": 0.1,
        "url": "https://kc.mcafee.com/corporate/index?page=content\u0026amp;id=sb10296"
      },
      {
        "trust": 0.1,
        "url": "https://support.f5.com/csp/article/k02591030?utm_source=f5support\u0026amp;amp;utm_medium=rss"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/770.html"
      },
      {
        "trust": 0.1,
        "url": "http://tools.cisco.com/security/center/viewalert.x?alertid=60633"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://www.kb.cert.org/vuls/id/605641"
      },
      {
        "trust": 0.1,
        "url": "https://security-tracker.debian.org/tracker/nginx"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0197"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-5407"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-17199"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-17189"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-0737"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-17199"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-0737"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-0217"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-0734"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0217"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-0197"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-17189"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-5407"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2019-0196"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-0196"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2018-0734"
      },
      {
        "trust": 0.1,
        "url": "https://issues.jboss.org/):"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?downloadtype=distributions\u0026product=jboss.amq.broker\u0026version=7.4.3"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2020:1445"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.4/"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/documentation/en-us/red_hat_amq/7.6/"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?downloadtype=distributions\u0026product=jboss.amq.broker\u0026version=7.6.0\u0026productchanged=yes"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2020:0922"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160951"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9516"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "db": "PACKETSTORM",
        "id": "154712"
      },
      {
        "db": "PACKETSTORM",
        "id": "155417"
      },
      {
        "db": "PACKETSTORM",
        "id": "154470"
      },
      {
        "db": "PACKETSTORM",
        "id": "154697"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "154533"
      },
      {
        "db": "PACKETSTORM",
        "id": "156852"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201908-938"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9516"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160951"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9516"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "db": "PACKETSTORM",
        "id": "154712"
      },
      {
        "db": "PACKETSTORM",
        "id": "155417"
      },
      {
        "db": "PACKETSTORM",
        "id": "154470"
      },
      {
        "db": "PACKETSTORM",
        "id": "154697"
      },
      {
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "db": "PACKETSTORM",
        "id": "154533"
      },
      {
        "db": "PACKETSTORM",
        "id": "156852"
      },
      {
        "db": "PACKETSTORM",
        "id": "154693"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201908-938"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9516"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-08-13T00:00:00",
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "date": "2019-08-13T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160951"
      },
      {
        "date": "2019-08-13T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9516"
      },
      {
        "date": "2019-08-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "date": "2019-08-22T20:20:23",
        "db": "PACKETSTORM",
        "id": "154190"
      },
      {
        "date": "2019-10-02T15:03:59",
        "db": "PACKETSTORM",
        "id": "154712"
      },
      {
        "date": "2019-11-20T21:11:11",
        "db": "PACKETSTORM",
        "id": "155417"
      },
      {
        "date": "2019-09-12T14:32:43",
        "db": "PACKETSTORM",
        "id": "154470"
      },
      {
        "date": "2019-10-01T20:45:33",
        "db": "PACKETSTORM",
        "id": "154697"
      },
      {
        "date": "2020-04-14T15:39:41",
        "db": "PACKETSTORM",
        "id": "157214"
      },
      {
        "date": "2019-09-19T16:28:51",
        "db": "PACKETSTORM",
        "id": "154533"
      },
      {
        "date": "2020-03-23T15:57:42",
        "db": "PACKETSTORM",
        "id": "156852"
      },
      {
        "date": "2019-09-30T22:22:22",
        "db": "PACKETSTORM",
        "id": "154693"
      },
      {
        "date": "2019-08-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201908-938"
      },
      {
        "date": "2019-08-13T21:15:12.583000",
        "db": "NVD",
        "id": "CVE-2019-9516"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-11-19T00:00:00",
        "db": "CERT/CC",
        "id": "VU#605641"
      },
      {
        "date": "2020-10-22T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160951"
      },
      {
        "date": "2022-08-05T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9516"
      },
      {
        "date": "2019-08-26T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-008116"
      },
      {
        "date": "2021-10-29T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201908-938"
      },
      {
        "date": "2023-11-07T03:13:42.893000",
        "db": "NVD",
        "id": "CVE-2019-9516"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201908-938"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "HTTP/2 implementations do not robustly handle abnormal traffic and resource exhaustion",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#605641"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "resource management error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201908-938"
      }
    ],
    "trust": 0.6
  }
}

{
  "affected": [],
  "aliases": [
    "CVE-2019-9516"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-770"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2019-08-13T21:15:00Z",
    "severity": "MODERATE"
  },
  "details": "Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.",
  "id": "GHSA-6gw7-c226-vg73",
  "modified": "2022-08-06T00:00:49Z",
  "published": "2022-05-24T16:53:19Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9516"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2745"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H472D5HPXN6RRXCNFML3BK5OYC52CXF2"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD"
    },
    {
      "type": "WEB",
      "url": "https://seclists.org/bugtraq/2019/Aug/24"
    },
    {
      "type": "WEB",
      "url": "https://seclists.org/bugtraq/2019/Aug/40"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20190823-0002"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20190823-0005"
    },
    {
      "type": "WEB",
      "url": "https://support.f5.com/csp/article/K02591030"
    },
    {
      "type": "WEB",
      "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/4099-1"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2019/dsa-4505"
    },
    {
      "type": "WEB",
      "url": "https://www.synology.com/security/advisory/Synology_SA_19_33"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2746"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2775"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2799"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2925"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2939"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2946"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2950"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2955"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:2966"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3932"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3933"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:3935"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
    },
    {
      "type": "WEB",
      "url": "https://kb.cert.org/vuls/id/605641"
    },
    {
      "type": "WEB",
      "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2019/Aug/16"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "nginx ist eine modular aufgebaute Webserver-Software, welche durch verschiedene Module Funktionalit\u00e4ten wie Reverse- oder Email-Proxy unterst\u00fctzt. Nginx wird unter der BSD-Lizenz vertrieben.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in nginx ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-1050 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2024-1050.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-1050 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1050"
      },
      {
        "category": "external",
        "summary": "NGINX Security Advisory vom 2019-08-14",
        "url": "https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-4099-1 vom 2019-08-16",
        "url": "https://usn.ubuntu.com/4099-1/"
      },
      {
        "category": "external",
        "summary": "Arch Linux Security Advisory ASA-201908-12 vom 2019-08-17",
        "url": "https://security.archlinux.org/ASA-201908-12"
      },
      {
        "category": "external",
        "summary": "Arch Linux Security Advisory ASA-201908-13 vom 2019-08-17",
        "url": "https://security.archlinux.org/ASA-201908-13"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4505 vom 2019-08-23",
        "url": "http://www.debian.org/security/2019/dsa-4505"
      },
      {
        "category": "external",
        "summary": "Arch Linux Security Advisory ASA-201908-17 vom 2019-08-27",
        "url": "https://security.archlinux.org/ASA-201908-17"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4511 vom 2019-09-02",
        "url": "https://www.debian.org/security/2019/dsa-4511"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2019:2309-1 vom 2019-09-06",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192309-1.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2692 vom 2019-09-10",
        "url": "https://access.redhat.com/errata/RHSA-2019:2692"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2019-2692 vom 2019-09-11",
        "url": "http://linux.oracle.com/errata/ELSA-2019-2692.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2746 vom 2019-09-12",
        "url": "https://access.redhat.com/errata/RHSA-2019:2746"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2745 vom 2019-09-12",
        "url": "https://access.redhat.com/errata/RHSA-2019:2745"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2775 vom 2019-09-17",
        "url": "https://access.redhat.com/errata/RHSA-2019:2775"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2799-01 vom 2019-09-17",
        "url": "https://access.redhat.com/errata/RHSA-2019:2799"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Errata ELSA-2019-2799 vom 2019-09-19",
        "url": "https://linux.oracle.com/errata/ELSA-2019-2799.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2019:2473-1 vom 2019-09-26",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192473-1.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2925 vom 2019-09-30",
        "url": "https://access.redhat.com/errata/RHSA-2019:2925"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2939 vom 2019-10-01",
        "url": "https://access.redhat.com/errata/RHSA-2019:2939"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2946 vom 2019-10-01",
        "url": "https://access.redhat.com/errata/RHSA-2019:2946"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2950 vom 2019-10-01",
        "url": "https://access.redhat.com/errata/RHSA-2019:2950"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2949 vom 2019-10-01",
        "url": "https://access.redhat.com/errata/RHSA-2019:2949"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2966 vom 2019-10-03",
        "url": "https://access.redhat.com/errata/RHSA-2019:2966"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:2955 vom 2019-10-02",
        "url": "https://access.redhat.com/errata/RHSA-2019:2955"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2019:2559-1 vom 2019-10-04",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20192559-1.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:3041 vom 2019-10-14",
        "url": "https://access.redhat.com/errata/RHSA-2019:3041"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:3933 vom 2019-11-20",
        "url": "https://access.redhat.com/errata/RHSA-2019:3933"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:3935 vom 2019-11-20",
        "url": "https://access.redhat.com/errata/RHSA-2019:3935"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:3932 vom 2019-11-20",
        "url": "https://access.redhat.com/errata/RHSA-2019:3932"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:4018 vom 2019-11-26",
        "url": "https://access.redhat.com/errata/RHSA-2019:4018"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:4019 vom 2019-11-26",
        "url": "https://access.redhat.com/errata/RHSA-2019:4019"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:4021 vom 2019-11-26",
        "url": "https://access.redhat.com/errata/RHSA-2019:4021"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2019:4020 vom 2019-11-28",
        "url": "https://access.redhat.com/errata/RHSA-2019:4020"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:0922 vom 2020-03-23",
        "url": "https://access.redhat.com/errata/RHSA-2020:0922"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:0983 vom 2020-03-26",
        "url": "https://access.redhat.com/errata/RHSA-2020:0983"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:1445 vom 2020-04-14",
        "url": "https://access.redhat.com/errata/RHSA-2020:1445"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4669 vom 2020-04-30",
        "url": "https://www.debian.org/security/2020/dsa-4669"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:2067 vom 2020-05-18",
        "url": "https://access.redhat.com/errata/RHSA-2020:2067"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:0932-1 vom 2021-03-24",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008541.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2020:3192 vom 2020-07-28",
        "url": "https://access.redhat.com/errata/RHSA-2020:3192"
      },
      {
        "category": "external",
        "summary": "Juniper Security Advisory JSA11167 vom 2021-04-16",
        "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11167"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2020-5495 vom 2020-12-18",
        "url": "https://linux.oracle.com/errata/ELSA-2020-5495.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-6754-2 vom 2024-05-07",
        "url": "https://ubuntu.com/security/notices/USN-6754-2"
      }
    ],
    "source_lang": "en-US",
    "title": "nginx: Mehrere Schwachstellen erm\u00f6glichen Denial of Service",
    "tracking": {
      "current_release_date": "2024-05-07T22:00:00.000+00:00",
      "generator": {
        "date": "2024-05-08T08:11:09.301+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2024-1050",
      "initial_release_date": "2019-08-14T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2019-08-14T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2019-08-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2019-08-18T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Arch Linux und Fedora aufgenommen"
        },
        {
          "date": "2019-08-19T22:00:00.000+00:00",
          "number": "4",
          "summary": "Referenz(en) aufgenommen: FEDORA-2019-63BA15CC83, FEDORA-2019-8A437D5C2F, FEDORA-2019-4427FD65BE"
        },
        {
          "date": "2019-08-22T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2019-08-27T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Arch Linux und Fedora aufgenommen"
        },
        {
          "date": "2019-09-02T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2019-09-05T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2019-09-09T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-10T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2019-09-12T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-17T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-18T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-19T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2019-09-26T22:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2019-09-29T22:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-30T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-09-30T22:00:00.000+00:00",
          "number": "18",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2019-10-01T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-10-03T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-10-06T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2019-10-14T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-11-20T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-11-26T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2019-11-27T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-03-22T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-03-26T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-04-14T22:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-04-29T22:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2020-05-17T22:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-07-28T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2020-12-17T23:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2021-03-24T23:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-04-15T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von Juniper aufgenommen"
        },
        {
          "date": "2024-05-07T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        }
      ],
      "status": "final",
      "version": "35"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Juniper JUNOS",
            "product": {
              "name": "Juniper JUNOS",
              "product_id": "5930",
              "product_identification_helper": {
                "cpe": "cpe:/o:juniper:junos:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.16.1",
                "product": {
                  "name": "Open Source nginx \u003c1.16.1",
                  "product_id": "T014853",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:1.16.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c1.17.3",
                "product": {
                  "name": "Open Source nginx \u003c1.17.3",
                  "product_id": "T014854",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:1.17.3"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cPlus R18 P1",
                "product": {
                  "name": "Open Source nginx \u003cPlus R18 P1",
                  "product_id": "T014855",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:nginx:nginx:plus_r18_p1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NGINX"
          }
        ],
        "category": "vendor",
        "name": "NGINX"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source Arch Linux",
            "product": {
              "name": "Open Source Arch Linux",
              "product_id": "T013312",
              "product_identification_helper": {
                "cpe": "cpe:/o:archlinux:archlinux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-9511",
      "notes": [
        {
          "category": "description",
          "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "5930",
          "T004914"
        ]
      },
      "release_date": "2019-08-14T22:00:00Z",
      "title": "CVE-2019-9511"
    },
    {
      "cve": "CVE-2019-9513",
      "notes": [
        {
          "category": "description",
          "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "5930",
          "T004914"
        ]
      },
      "release_date": "2019-08-14T22:00:00Z",
      "title": "CVE-2019-9513"
    },
    {
      "cve": "CVE-2019-9516",
      "notes": [
        {
          "category": "description",
          "text": "In nginx existieren mehrere Schwachstellen. Diese befinden sich in der HTTP/2 Implementierung. Sie beruht auf Fehlern bei der Verarbeitung von ungew\u00f6hnlich gestalteten Requests. Ein Angreifer kann dieses durch \u00dcbermittlung geeignet gestalteter Daten zu einem Denial of Service Angriff nutzen."
        }
      ],
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T013312",
          "5930",
          "T004914"
        ]
      },
      "release_date": "2019-08-14T22:00:00Z",
      "title": "CVE-2019-9516"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2019-9516",
    "description": "Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.",
    "id": "GSD-2019-9516",
    "references": [
      "https://www.suse.com/security/cve/CVE-2019-9516.html",
      "https://www.debian.org/security/2019/dsa-4505",
      "https://access.redhat.com/errata/RHSA-2020:1445",
      "https://access.redhat.com/errata/RHSA-2020:0983",
      "https://access.redhat.com/errata/RHSA-2020:0922",
      "https://access.redhat.com/errata/RHSA-2019:3935",
      "https://access.redhat.com/errata/RHSA-2019:3933",
      "https://access.redhat.com/errata/RHSA-2019:3932",
      "https://access.redhat.com/errata/RHSA-2019:2966",
      "https://access.redhat.com/errata/RHSA-2019:2955",
      "https://access.redhat.com/errata/RHSA-2019:2950",
      "https://access.redhat.com/errata/RHSA-2019:2946",
      "https://access.redhat.com/errata/RHSA-2019:2939",
      "https://access.redhat.com/errata/RHSA-2019:2925",
      "https://access.redhat.com/errata/RHSA-2019:2799",
      "https://access.redhat.com/errata/RHSA-2019:2775",
      "https://access.redhat.com/errata/RHSA-2019:2746",
      "https://access.redhat.com/errata/RHSA-2019:2745",
      "https://ubuntu.com/security/CVE-2019-9516",
      "https://advisories.mageia.org/CVE-2019-9516.html",
      "https://security.archlinux.org/CVE-2019-9516",
      "https://alas.aws.amazon.com/cve/html/CVE-2019-9516.html",
      "https://linux.oracle.com/cve/CVE-2019-9516.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2019-9516"
      ],
      "details": "Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.",
      "id": "GSD-2019-9516",
      "modified": "2023-12-13T01:23:47.811163Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "AKA": "HTTP/2 0-Length Headers Leak",
        "ASSIGNER": "cert@cert.org",
        "ID": "CVE-2019-9516",
        "STATE": "PUBLIC",
        "TITLE": "Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "credit": [
        {
          "lang": "eng",
          "value": "Thanks to Jonathan Looney of Netflix for reporting this vulnerability."
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory."
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.0.7"
      },
      "impact": {
        "cvss": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.0"
        }
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-400 Uncontrolled Resource Consumption"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "VU#605641",
            "refsource": "CERT-VN",
            "url": "https://kb.cert.org/vuls/id/605641/"
          },
          {
            "name": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
            "refsource": "MISC",
            "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
          },
          {
            "name": "20190814 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
            "refsource": "BUGTRAQ",
            "url": "https://seclists.org/bugtraq/2019/Aug/24"
          },
          {
            "name": "USN-4099-1",
            "refsource": "UBUNTU",
            "url": "https://usn.ubuntu.com/4099-1/"
          },
          {
            "name": "20190816 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
            "refsource": "FULLDISC",
            "url": "http://seclists.org/fulldisclosure/2019/Aug/16"
          },
          {
            "name": "https://www.synology.com/security/advisory/Synology_SA_19_33",
            "refsource": "CONFIRM",
            "url": "https://www.synology.com/security/advisory/Synology_SA_19_33"
          },
          {
            "name": "https://support.f5.com/csp/article/K02591030",
            "refsource": "CONFIRM",
            "url": "https://support.f5.com/csp/article/K02591030"
          },
          {
            "name": "FEDORA-2019-befd924cfe",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/"
          },
          {
            "name": "20190822 [SECURITY] [DSA 4505-1] nginx security update",
            "refsource": "BUGTRAQ",
            "url": "https://seclists.org/bugtraq/2019/Aug/40"
          },
          {
            "name": "DSA-4505",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2019/dsa-4505"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20190823-0002/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20190823-0002/"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20190823-0005/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20190823-0005/"
          },
          {
            "name": "FEDORA-2019-5a6a7bc12c",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/"
          },
          {
            "name": "FEDORA-2019-6a2980de56",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/"
          },
          {
            "name": "FEDORA-2019-4427fd65be",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS/"
          },
          {
            "name": "FEDORA-2019-63ba15cc83",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD/"
          },
          {
            "name": "FEDORA-2019-7a0b45fdc4",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/"
          },
          {
            "name": "openSUSE-SU-2019:2120",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html"
          },
          {
            "name": "openSUSE-SU-2019:2114",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html"
          },
          {
            "name": "openSUSE-SU-2019:2115",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
          },
          {
            "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296",
            "refsource": "CONFIRM",
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296"
          },
          {
            "name": "RHSA-2019:2745",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2745"
          },
          {
            "name": "RHSA-2019:2746",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2746"
          },
          {
            "name": "RHSA-2019:2775",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2775"
          },
          {
            "name": "RHSA-2019:2799",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2799"
          },
          {
            "name": "RHSA-2019:2925",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2925"
          },
          {
            "name": "RHSA-2019:2939",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2939"
          },
          {
            "name": "RHSA-2019:2946",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2946"
          },
          {
            "name": "RHSA-2019:2950",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2950"
          },
          {
            "name": "RHSA-2019:2955",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2955"
          },
          {
            "name": "RHSA-2019:2966",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:2966"
          },
          {
            "name": "openSUSE-SU-2019:2264",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html"
          },
          {
            "name": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS",
            "refsource": "CONFIRM",
            "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS"
          },
          {
            "name": "RHSA-2019:3933",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3933"
          },
          {
            "name": "RHSA-2019:3935",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3935"
          },
          {
            "name": "RHSA-2019:3932",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2019:3932"
          },
          {
            "name": "FEDORA-2021-d5b2c18fe6",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H472D5HPXN6RRXCNFML3BK5OYC52CXF2/"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:apple:swiftnio:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndIncluding": "1.4.0",
                    "versionStartIncluding": "1.0.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionStartIncluding": "14.04",
                    "vulnerable": false
                  },
                  {
                    "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionStartIncluding": "10.12",
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.0.3",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "7.1.6",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "6.2.3",
                "versionStartIncluding": "6.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:synology:skynas:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:software_collections:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:quay:3.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:graalvm:19.2.0:*:*:*:enterprise:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.7.2.24",
                "versionStartIncluding": "7.7.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.8.2.13",
                "versionStartIncluding": "7.8.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.2.0",
                "versionStartIncluding": "8.1.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "1.16.1",
                "versionStartIncluding": "1.9.5",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.17.2",
                "versionStartIncluding": "1.17.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "12.8.1",
                "versionStartIncluding": "12.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.16.1",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "10.16.3",
                "versionStartIncluding": "10.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2019-9516"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-770"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "VU#605641",
              "refsource": "CERT-VN",
              "tags": [
                "Third Party Advisory",
                "US Government Resource"
              ],
              "url": "https://kb.cert.org/vuls/id/605641/"
            },
            {
              "name": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md"
            },
            {
              "name": "20190814 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
              "refsource": "BUGTRAQ",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://seclists.org/bugtraq/2019/Aug/24"
            },
            {
              "name": "USN-4099-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://usn.ubuntu.com/4099-1/"
            },
            {
              "name": "20190816 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
              "refsource": "FULLDISC",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://seclists.org/fulldisclosure/2019/Aug/16"
            },
            {
              "name": "https://www.synology.com/security/advisory/Synology_SA_19_33",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.synology.com/security/advisory/Synology_SA_19_33"
            },
            {
              "name": "https://support.f5.com/csp/article/K02591030",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://support.f5.com/csp/article/K02591030"
            },
            {
              "name": "FEDORA-2019-befd924cfe",
              "refsource": "FEDORA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TAZZEVTCN2B4WT6AIBJ7XGYJMBTORJU5/"
            },
            {
              "name": "20190822 [SECURITY] [DSA 4505-1] nginx security update",
              "refsource": "BUGTRAQ",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://seclists.org/bugtraq/2019/Aug/40"
            },
            {
              "name": "DSA-4505",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2019/dsa-4505"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190823-0005/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20190823-0005/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190823-0002/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20190823-0002/"
            },
            {
              "name": "FEDORA-2019-5a6a7bc12c",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/"
            },
            {
              "name": "FEDORA-2019-6a2980de56",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/"
            },
            {
              "name": "FEDORA-2019-4427fd65be",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BP556LEG3WENHZI5TAQ6ZEBFTJB4E2IS/"
            },
            {
              "name": "FEDORA-2019-63ba15cc83",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XHTKU7YQ5EEP2XNSAV4M4VJ7QCBOJMOD/"
            },
            {
              "name": "FEDORA-2019-7a0b45fdc4",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/POPAEC4FWL4UU4LDEGPY5NPALU24FFQD/"
            },
            {
              "name": "openSUSE-SU-2019:2120",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00035.html"
            },
            {
              "name": "openSUSE-SU-2019:2114",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html"
            },
            {
              "name": "openSUSE-SU-2019:2115",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html"
            },
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10296"
            },
            {
              "name": "RHSA-2019:2746",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2746"
            },
            {
              "name": "RHSA-2019:2745",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2745"
            },
            {
              "name": "RHSA-2019:2775",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2775"
            },
            {
              "name": "RHSA-2019:2799",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2799"
            },
            {
              "name": "RHSA-2019:2925",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2925"
            },
            {
              "name": "RHSA-2019:2939",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2939"
            },
            {
              "name": "RHSA-2019:2946",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2946"
            },
            {
              "name": "RHSA-2019:2950",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2950"
            },
            {
              "name": "RHSA-2019:2955",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2955"
            },
            {
              "name": "RHSA-2019:2966",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:2966"
            },
            {
              "name": "openSUSE-SU-2019:2264",
              "refsource": "SUSE",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00014.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://support.f5.com/csp/article/K02591030?utm_source=f5support\u0026amp;utm_medium=RSS"
            },
            {
              "name": "RHSA-2019:3935",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:3935"
            },
            {
              "name": "RHSA-2019:3933",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:3933"
            },
            {
              "name": "RHSA-2019:3932",
              "refsource": "REDHAT",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://access.redhat.com/errata/RHSA-2019:3932"
            },
            {
              "name": "FEDORA-2021-d5b2c18fe6",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H472D5HPXN6RRXCNFML3BK5OYC52CXF2/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.8,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.0,
          "impactScore": 6.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2022-08-05T14:52Z",
      "publishedDate": "2019-08-13T21:15Z"
    }
  }
}